OWASP Dependency-Check Open Source Scanner

Explore this developer service’s ongoing no-cost allowance, restrictions and official documentation before deploying.

INCLUDED FREE ALLOWANCE

Apache-2.0 open-source software composition analysis CLI, build plugins and Docker scanner; no software license fee or per-project scan quota.

Plan details

What do these plan and deployment labels mean?

Plan: Ongoing free allowance
Deployment model: Local / embedded
Credit card: Not required
Commercial use: Allowed
Added to directory (UTC): 2026-10-31
Last checked: 2026-10-31

Important restrictions

Requires vulnerability data downloads and Java 11+. An NVD API key is strongly recommended due to rate limits; optional Sonatype OSS Index/Guide analyzers require credentials and may have separate commercial terms. CI runners and infrastructure cost extra.

View official documentation

Independent community listing, not affiliated with the provider. Always check the latest billing policy and quotas before enabling paid usage.