Company lists · Data refreshed November 2026

Top 25 Software composition analysis tools worldwide

RevenueBase identified 85 company matches for software composition analysis tools worldwide as of November 2026 and tracks 2,790 professional contacts across them, including 766 with verified work emails. The United States is the largest market and San Francisco the largest hub.

This list covers company matches for software composition analysis tools worldwide, found by RevenueBase SmartSearch using the meaning of business descriptions in its company graph at Exact. Ranked by professionals tracked, largest first. Rows show recorded descriptions where available, Exact search membership and the snapshot date. Data refreshed November 5, 2026. Country and city lists for software composition analysis tools follow the table.

Published by RevenueBase, a B2B data infrastructure company. This list was built with RevenueBase SmartSearch, the natural-language company search RevenueBase customers use to build their own targeted lists and unlock verified emails and direct dials at the companies on them. How these lists are built and judged.

How to read this list RevenueBase SmartSearch · Exact Recorded Nov 5, 2026 How this list was built
85Companies
2,790Contacts tracked
766Verified emails
Explore this list → Free signup · no credit card · 500 free credits

The 25 largest software composition analysis tools worldwide

Ranked by team size
Top 25 of 85 company matches for software composition analysis tools worldwide, ordered by professional contacts tracked in RevenueBase, largest first. Recorded Nov 5, 2026. The RevenueBase SmartSearch column shows Exact match membership in this saved search. Click a contact count to view that company's people. Totals use company locations recorded by RevenueBase; the displayed preview is a smaller selection.
#CompanyRevenueBase SmartSearchHeadquartersEmployeesContacts
1Exact matchBurlington, MA, United StatesHQ recorded Nov 5, 20265,001-10,0001,298 contacts →

Exact match

“Black Duck® meets the board-level risks of modern software with True Scale Application Security, ensuring uncompromised trust in software for the regulated, AI-powered world.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
2Exact matchFulton, United StatesHQ recorded Nov 5, 2026501-1,000577 contacts →

Exact match

“The Sonatype journey started 15 years ago, just as the concept of “open source” software development was gaining steam.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
3Exact matchSan Francisco, CA, United StatesHQ recorded Nov 5, 202651-20060 contacts →

Exact match

“FOSSA is a leading SBOM and software supply chain risk management platform.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
4Exact matchSanta Barbara, CA, United StatesHQ recorded Nov 5, 202651-20053 contacts →

Exact match

“Anchore is a leader in software supply chain security for modern cloud-native environments.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
5Exact matchGaithersburg, MD, United StatesHQ recorded Nov 5, 202651-20039 contacts →

Exact match

“Ensure software supply chain integrity with precise code scanning, automated license identification, and complete SBOM reporting – all without slowing development.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
6Exact matchAstana, KazakhstanHQ recorded Nov 5, 202611-5028 contacts →

Exact match

“PVS-Studio is a tool for detecting bugs and security weaknesses in the source code of programs, written in C, C++, C# and Java.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
7Exact matchDulles, CA, United StatesHQ recorded Nov 5, 2026n/a24 contacts →

Exact match

“Cigital is now a part of Synopsys.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
8Exact matchMadrid, SpainHQ recorded Nov 5, 202651-20023 contacts →

Exact match

“Every modern codebase is a Frankie, stitched together from open source libraries, copied snippets, internal components, and AI-generated code.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
9Exact matchSt. George, UT, United StatesHQ recorded Nov 5, 202611-5019 contacts →

Exact match

“Here at SciTools we empower engineers with tools that make it easier to comprehend and maintain complex code bases allowing them to accomplish their tasks quicker and easier.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
10Exact matchSingaporeHQ recorded Nov 5, 202611-5019 contacts →

Exact match

“A Singapore-based cybersecurity company founded in 2016, spining off from Nanyang Technological University’s Cyber Security Lab.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
11Exact matchBethesda, MD, United StatesHQ recorded Nov 5, 202611-5018 contacts →

Exact match

“AI is accelerating code.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
12Exact matchSaint Petersburg, RussiaHQ recorded Nov 5, 202611-5017 contacts →

Exact match

“CodeScoring is a developer security platform for securing supply chain, open source dependencies and maintain code quality.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
13Exact matchToronto, ON, CanadaHQ recorded Nov 5, 202611-5014 contacts →

Exact match

“Security is of utmost concern for embedded software used in mobile, IoT, and automotive industries.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
14Exact matchWinooski, VT, United StatesHQ recorded Nov 5, 202611-5012 contacts →

Exact match

“SOOS is the affordable, easy-to-integrate Software Composition Analysis and Dynamic Application Security Testing solution for your whole team.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
15Exact matchMountain View, CA, United StatesHQ recorded Nov 5, 202611-5011 contacts →

Exact match

Recorded description not available.

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
16Exact matchLondon, United KingdomHQ recorded Nov 5, 202611-5010 contacts →

Exact match

“Meterian secures your software supply chain by detecting and fixing open source vulnerabilities before they impact your business.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
17Exact matchDallas, United StatesHQ recorded Nov 5, 202611-509 contacts →

Exact match

“Threatrix is revolutionizing software supply chain security and license compliance with our advanced IDE plugin.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
18Exact matchMalmö, SwedenHQ recorded Nov 5, 202611-508 contacts →

Exact match

“Debricked is the small voyager with huge ambitions to not only become the best software composition analysis tool in the universe but to bring SCA 2.0 to the game.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
19Exact matchRoseville, CA, United StatesHQ recorded Nov 5, 20261-107 contacts →

Exact match

“Built on secure-by-design principles, Apona Security offers a suite of ASPM and SSCS tools that can be used individually or together for proactive management of open source and…”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
20Exact matchOulu, CA, FinlandHQ recorded Nov 5, 20261-105 contacts →

Exact match

“Improve code reviews and pull requests with impact reports!”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
21Exact matchAmsterdam, NetherlandsHQ recorded Nov 5, 20261-105 contacts →

Exact match

“NanoAPI is a source-available devtool for examining, benchmarking, and automatically improving your software architecture through an intuitive CLI and UI.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
22Exact matchStockholm, SwedenHQ recorded Nov 5, 20261-103 contacts →

Exact match

“Bytesafe helps companies worldwide to securely manage npm packages/JavaScript components by managing open source dependencies and identifying security and license issues.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
23Exact matchEdinburgh, United KingdomHQ recorded Nov 5, 20261-103 contacts →

Exact match

“Vulert is a Software Composition Analysis (SCA) platform for monitoring vulnerabilities in open-source dependencies.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
24Exact matchRemote, United StatesHQ recorded Nov 5, 20261-102 contacts →

Exact match

“EdgeBit enables engineering teams to ship security updates 10x faster with confidence by automating dependency update analysis.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
25Exact matchUitikon-waldegg, SwitzerlandHQ recorded Nov 5, 20261-102 contacts →

Exact match

“We capture, analyze, and visualize dependencies in your software and system components, revealing hidden value and lost insights.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase

Showing 25 of 85 software composition analysis tools worldwide

See the full list, filter by size, metro and specialty, and access 766 tracked professional contacts with verified work emails. Direct dials are available where recorded.

Free signup · no credit card

View the full list →

Software composition analysis tools worldwide at a glance

As of Nov 5, 2026
27.5%Verified-email coverage
32.8Average contacts per company
11-50Median size (employees)
3.5%Largest-city concentration · San Francisco
Nov 5, 2026Page data refreshed

Companies by employee count

1-10
41
11-50
26
51-200
14
201-500
1
501-1,000
1
5,001-10,000
1
10001+
1

Email recency is reported on each country list linked below.

How this list was built

The recorded descriptions help you assess these company matches. Check a company’s website for its current services and locations.

Source
The RevenueBase company graph: 60 million companies and 398.9 million professional contacts resolved from primary sources, queried with RevenueBase SmartSearch, the natural-language company search available to every RevenueBase user.
Coverage
Every country. Country and city lists for software composition analysis tools are linked below.
What qualifies
Company records worldwide whose business descriptions match “software composition analysis tools” by meaning at the Exact setting. Descriptions are compiled in the RevenueBase company graph from public websites, profiles and company information where available; they are not guaranteed quotations from the company's website.
RevenueBase SmartSearch
Describe a niche company in your own words to find businesses by meaning. Exact, Similar, Related and Broad control the breadth of RevenueBase SmartSearch. This saved list uses Exact. Each row's Exact match badge shows inclusion in that search, not an individual score or a service-quality judgment.
Public preview
The public preview omits records without a verified work email. Dataset totals and geographic summaries describe the full matched records before these preview filters.
Match quality
RevenueBase's August 25, 2026 study assessed 4,198 description/company pairs across matching settings. The publisher reports 86% good or better at Exact. This evaluates the method across queries; it does not audit this individual list. Recorded company descriptions, where available, help you judge each match yourself. Read the full methodology: how the lists are built and what the study measures.
Ranking
Team size, largest first: companies are ordered by the number of professionals RevenueBase tracks at each one. Employee ranges shown are reported bands, for context.
Verification
Every displayed company carries at least one verified work email. RevenueBase tracks 766 professional contacts with verified work emails across the full matched dataset. Contacts re-verify on a rolling cadence, and each contact's own verification date is shown inside RevenueBase.
Refresh
This page's figures were pulled from the company graph on November 5, 2026. Lists refresh periodically as the graph is re-checked.
Record context
Company records and descriptions can change. Check the company's website for its current services and locations.

Software composition analysis tools by location

1 lists · largest first

Every Software composition analysis tools list RevenueBase publishes, by country and city. Counts are matching companies in each list as of its own refresh date.

Countries

Frequently asked

What is RevenueBase SmartSearch?

RevenueBase SmartSearch finds niche companies by the meaning of their business descriptions in the RevenueBase company graph. Exact, Similar, Related and Broad control how closely companies must fit your description. This list uses Exact for “software composition analysis tools”; each Exact match badge shows search membership, not an individual similarity or quality score.

How many software composition analysis tools are there worldwide?

RevenueBase identified 85 company matches for software composition analysis tools worldwide as of November 2026, using the meaning of business descriptions at Exact. This is the recorded matched set in the RevenueBase company graph.

What is the largest company on this list?

Black Duck tops the displayed preview by professional contacts tracked in RevenueBase. Recorded headquarters appear in the company rows.

Which country has the most software composition analysis tools?

The United States leads with 28 companies. Every software composition analysis tools list by country and city is linked on this page.

Which city has the most software composition analysis tools?

San Francisco leads with 3 company records, followed by Amsterdam (2) and Berlin (2).

How do I get contact information for these companies?

A free RevenueBase account lets you run this exact search and work limited free results with 500 credits to start. Upgrading provides access to the 766 professional contacts with verified work emails tracked across these 85 companies; direct dials are available where recorded.

How current is this list?

The list refreshes periodically as the company graph is re-checked. This page's figures were pulled on November 5, 2026.

Ready to reach these companies? Verified emails and direct dials for all 85 software composition analysis tools worldwide. Start with a free account, no credit card.

Download this list →

Related lists

About this data

RevenueBase is a B2B data infrastructure company. Its company graph covers 60 million companies and 398.9 million professional contacts, with emails verified on a rolling cadence rather than scraped once and left to decay. These company lists are generated directly from that graph with RevenueBase SmartSearch, the same natural-language company search every RevenueBase user has: describe a market in plain words, get the companies that match, and add verified emails and direct dials for the people at them. It is the same data that powers RevenueBase's B2B data products, and a free account includes 500 credits to start. How these lists are built and judged.