hackingDNAreference

← OWASP projects

OWASP Dependency-Check

toolflagship

SCA tool that identifies project dependencies with known CVEs.

Watch tutorials Official site

Bug bounty context

Relevant for programs that allow client-side or open-source component review.

Related projects

OWASP DefectDojo
Open-source vulnerability management and orchestration platform.
→
OWASP Dependency-Track
Continuous SBOM analysis platform for supply chain risk.
→
OWASP OWTF
Offensive Web Testing Framework aligning OWASP + PTES tooling automation.
→