Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities ...

Dependency-Track is the open source platform that over 20,000 organizations use to inventory components, find vulnerabilities, and enforce policy across the software supply chain.

Dependency-Track monitors component usage across all versions of every application in its portfolio in order to proactively identify risk across an organization.

May 19, 2026 - Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. - DependencyTrack/dependency-track

September 26, 2025 - OWASP Dependency-Track — an open-source tool for continuous Software Composition Analysis (SCA), helping teams identify vulnerabilities in third-party libraries, manage SBOMs, and improve supply chain security.

The Dependency-Track is an OWASP Flagship project and can be installed using a docker-compose file from the Dependency-Track website.

June 9, 2026 - Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

Dependency-Check has a command line interface, a Maven plugin, a Gradle plugin, an Ant task and a number of integrations with build tooling such as Jenkins, GitHub Actions and Azure DevOps. The core engine contains a series of analyzers that inspect the project dependencies, collect pieces of information about the dependencies (referred to as evidence within the tool).

Dependency-Track is an intelligent continuous SBOM (Software Bill of Materials) analysis platform that enables organizations to identify and reduce risk in the software supply chain by monitoring component usage across all application versions and integrating with multiple sources of vulnerability ...

July 31, 2025 - The Open Web Application Security Project (OWASP) has released a new version of its dependency tracking tool, which can identify known vulnerabilities in third-party software components, measure and enforce policy compliance, respond to identified vulnerabilities, prioritize vulnerability mitigation, triage findings and policy violations, and produce a CycloneDX-based software bill of materials (SBOM).

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source software and hardware components.

April 22, 2026 - Dependency Track is a significant project within OWASP. It helps organizations monitor software dependency vulnerabilities. It also offers guidance on dependency usage along with dependency licenses, as explained in Component Analysis.

OWASP Dependency-Track is a tool designed to help organizations analyze software components and manage risks in their software supply chains. It uses Software Bill of Materials (SBOM) to offer features that traditional analysis tools do not provide.

Dependency-Track monitors component usage across all versions of every application in its portfolio in order to proactively identify risk across an organization. The platform has an API-first design and is ideal for use in Continuous Integration (CI) and Continuous Delivery (CD) environments. ...

June 9, 2026 - OWASP Dependency-Track, the open source platform that organizations use to identify and reduce risk in the software supply chain, today announced the general availability of version 5.0. Developed under the codename Hyades, v5 is the most extensive ...

Download and deploy OWASP Dependency-Track 5.0. Container images, system requirements, breaking changes, and the v4 to v5 migration path.

April 4, 2026 - This is a guide to deploy Dependency-Track with one click. | Dependency-Track is an OWASP project for software composition analysis. It identifies vulnerabilities in third-party components by analyzing Software Bill of Materials (SBOM).

March 19, 2025 - Visualization Tools: Use data via Dependency Track API to build custom visualizations (e.g., live application trees or heatmaps showing vulnerability severity). For example, our GitHub Action, OWASP Dependency-Track Checker, integrates Dependency Track scan results directly into your CI/CD pipelines.

Dependency-Track on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.