Compare software

Dependency-Check vs Socket: catalog facts
Dependency-Check	Socket
Free The software is free under its open-source licence. Hosting, hardware and external…	Freemium Free tier for individuals and open source, with paid plans for organisations.
Windows, macOS, Linux, Command line	Web, Browser extension, Command line
It matches dependencies to CPE identifiers and reports the linked CVEs, and it plugs into Maven, Gradle, Jenkins…	Looks for malicious package behaviour, not only known CVEs Covers JavaScript, Python and Go dependencies
CPE matching produces false positives and misses, and it needs an NVD API key and a long initial…	Hosted service, scanning depends on Socket's platform Most features are aimed at teams and organisations
Downloadable app	Downloadable app, Hosted service, Browser extension
Open source	Closed source
License: Apache-2.0	License not stated
Not stated if an account is needed	Not stated if an account is needed
Not stated if it works offline	Needs internet
Official website Full listing and sources Checked September 22, 2026	Official website Full listing and sources Checked October 1, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.