Compare software

Trivy vs Dependency-Check: catalog facts
Trivy	Dependency-Check
Free The open-source software is available without a license fee. Hosting, hardware and…	Free The software is free under its open-source licence. Hosting, hardware and external…
Windows, macOS, Linux, Command line	Windows, macOS, Linux, Command line
Supports containers, filesystems and configuration checks.	It matches dependencies to CPE identifiers and reports the linked CVEs, and it plugs into Maven, Gradle, Jenkins…
Findings depend on scanner coverage and current vulnerability data.	CPE matching produces false positives and misses, and it needs an NVD API key and a long initial…
Downloadable app	Downloadable app
Open source	Open source
License: Apache-2.0	License: Apache-2.0
Not stated if an account is needed	Not stated if an account is needed
Not stated if it works offline	Not stated if it works offline
Official website Full listing and sources Checked September 22, 2026	Official website Full listing and sources Checked September 22, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.