Compare software

Grype vs govulncheck: catalog facts
Grype	govulncheck
Free The open-source software is available without a license fee. Hosting, hardware and…	Free Free and open source under the BSD-3-Clause license.
Windows, macOS, Linux, Command line	Windows, macOS, Linux, Command line
Can scan package inventories and software bills of materials.	Reachability analysis cuts down on irrelevant vulnerability reports Scans either source code or compiled binaries
Results depend on package identification and vulnerability database coverage.	Only covers Go code Queries the online Go vulnerability database by default
Downloadable app	Downloadable app
Open source	Open source
License: Apache-2.0	License: BSD-3-Clause
Not stated if an account is needed	No account needed
Not stated if it works offline	Not stated if it works offline
Official website Full listing and sources Checked September 22, 2026	Official website Full listing and sources Checked October 2, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.