| What it sells | - Anchore Enterprise[1][3][4]A software supply chain management platform that uses SBOMs to provide continuous security and compliance checks for containers and applications.
- SBOM Management[1][3]Generates, imports and organizes software bills of materials to give visibility into internal and external software components.
- Secure & Protect[1][3]Scans released or SaaS-hosted software for vulnerabilities and supplies SBOM-based assurance to customers.
- Automated Compliance[1][3]Applies pre-built policy packs and automated checks to help meet frameworks such as NIST, FedRAMP and DISA requirements.
- Anchore Federal[3]A public-sector focused offering supporting federal software security and compliance needs.
| - JFrog Artifactory[1]A repository system that manages and stores software artifacts, binaries and AI assets across the development lifecycle.
- JFrog Xray (SCA)Scans software and AI artifacts to identify open-source components and their known vulnerabilities.
- JFrog Advanced Security[1]Scans the software supply chain for exposures and analyses their potential impact, including secrets detection and infrastructure-as-code checks.
- JFrog Curation[1]Applies policy-based rules to control which software and AI components are allowed into a pipeline.
- JFrog AI Security[1]Monitors and governs AI models, agent skills, plugins and MCP servers consumed by AI agents.
- JFrog Distribution[1]Distributes software releases securely across multiple consumption points.
| - RapidFort Analyzer[1]Analyzes container images for vulnerabilities across build and runtime environments.
- RapidFort Curated Images[1]Provides pre-hardened container images with very few known CVEs as drop-in replacements for standard images.
- RapidFort Curated Libraries[1]Supplies open-source libraries that have been scanned for malware to reduce supply chain risk.
- RapidFort Runtime[1]Monitors running production software to show actual behavior of deployed containers.
- RapidFort Profiler[1]Profiles software at runtime to identify which components are actually executed.
- RapidFort Optimizer[1]Removes unused software components from containers to reduce the attack surface.
| - Socket Firewall[1]Blocks malicious packages from being installed before they reach a developer's machine, CI or production.
- Socket for GitHub[1]Scans pull requests for risky dependency additions and malicious package updates before they merge.
- Socket Reachability[1]Filters vulnerability alerts down to those that are actually reachable from the application's code.
- Socket Dependency SearchShows security insights for open source packages across major package registries.
|
|---|
| G2 and Gartner Peer Insights | - G2: Not stated on its pages
- Gartner Peer Insights: Not stated on its pages
| - G2: Not stated on its pages
- Gartner Peer Insights: Not stated on its pages
| - G2: Not stated on its pages
- Gartner Peer Insights: Not stated on its pages
| - G2: Not stated on its pages
- Gartner Peer Insights: Not stated on its pages
|
|---|