What Dependency Check is
Dependency Check is an open source SCA scanner maintained by the OWASP community This profile is an entry in the oneNorma directory, not a vendor landing page.
What Dependency Check covers
Dependency Check is in the catalog for these capabilities. Catalog tags: Open Source, Best for MidMarket, and Best for Startups.
How to evaluate Dependency Check in a security program
Use Dependency Check as a stack candidate, not as diligence evidence. A dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Contrast it with pentesting and Security Cloud & Compliance.