Anchore

What the company sells

Anchore provides a software supply chain security platform built around software bill of materials (SBOM) generation and management, container vulnerability scanning and automated compliance policy enforcement for development pipelines. Its products include Anchore Enterprise, SBOM management tools, a Secure & Protect module for released or SaaS-hosted software, and an Automated Compliance module with policy packs for frameworks like NIST and FedRAMP. The company also offers Anchore Federal for public-sector customers. A press release states Anchore raised $20 million in Series A funding at the start of 2020, indicating private ownership.^[1][2]

Categories

• Software supply chain security (primary category)
• Software composition analysis
• Compliance automation
• Vulnerability management

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Privately held

CISO on record

Not yet on our record. Send a verified source

Website

anchore.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Anchore Enterprise^[1]

  A software supply chain management platform that uses SBOMs to provide continuous security and compliance checks for containers and applications.

• SBOM Management^[1]

  Generates, imports and organizes software bills of materials to give visibility into internal and external software components.

• Secure & Protect^[1]

  Scans released or SaaS-hosted software for vulnerabilities and supplies SBOM-based assurance to customers.

• Automated Compliance^[1]

  Applies pre-built policy packs and automated checks to help meet frameworks such as NIST, FedRAMP and DISA requirements.

• Anchore Federal

  A public-sector focused offering supporting federal software security and compliance needs.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Anchore's categories, then alphabetical. A list from the record, never a ranking.

• On software supply chain security, Anchore competes with RapidFort, Red Hat, Archipelo, Chainguard, Phoenix Security, Snyk, Sonatype, Veracode, Aqua Security, Cycode and 5 more.

• On software composition analysis, Anchore competes with Snyk, Sonatype, Black Duck, RapidFort, Phoenix Security, Veracode, Checkmarx, Invicti, Kiuwan and Semgrep.

• On compliance automation, Anchore competes with Apptega, Copla, Drata, Hyperproof, RegScale, Secureframe, Sprinto, Thoropass, ConnectSecure, ICF and 5 more.

• On vulnerability management, Anchore competes with ConnectSecure, RapidFort, ICF, Red Hat, Blue Mantis, Guardare, Infosys, Leidos, Parsons, RAD Security and 3 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]anchore.comAnchore · anchore.com · undated page, accessed October 16, 2026 · Tier A: the company, a regulator or a filing
2. [2]Anchore continues remarkable growth and business momentumAnchore · anchore.com · published January 14, 2021 · Tier A: the company, a regulator or a filing

Last verified October 16, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded October 16, 2026 from the references above. Descriptions are in our own words; we do not rank or recommend vendors, and no vendor pays to be listed or to change what we write. Disclosure: until the publisher confirms it has no business relationship with this company, treat one as possible (how the network works). Spot a factual error? Request a correction.

Work for Anchore? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.