What Dependency Track is
Dependency Track is an open source option for creating vulnerability dashboards and notification workflows. The vendor site is dependencytrack.org. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Dependency Track covers
Dependency Track is in the catalog for these capabilities. Categories: Vulnerability Management and ASPM. Catalog tags: Nerdy and Open Source.
How to evaluate Dependency Track in a security program
Use Dependency Track as a stack candidate, not as diligence evidence. The oneNorma score for Dependency Track is 5/10 (percentile 46). If the real gap is in Vulnerability Management and ASPM, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what dependencytrack.org publishes. Contrast it with pentesting and Security Cloud & Compliance.