DependencyCheck

Sonatype Nexus Lifecycle is an application security tool that identifies and remediates open-source vulnerabilities across the software development lifecycle.

Snyk is a developer security platform that helps find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code.

WhiteSource (now Mend) is a software composition analysis tool that helps organizations manage open-source security, license compliance, and quality across their software supply chain.

Black Duck is a software composition analysis tool that helps organizations manage security, quality, and license compliance risks in open-source software.