Brandwave

How popular isOWASP Dependency-Track?

In September 2026, people searched for OWASP Dependency-Track by name about 9,900 times worldwide, a 22.2% increase from the previous year. These searches made up 11.2% of all global SBOM platform searches, placing OWASP Dependency-Track third out of ten platforms. When we asked both ChatGPT and Google AI Overviews about SBOM platforms, OWASP Dependency-Track appeared in three of the five answers and was the third most recommended of the ten.

Search and AI answers in September 2026

OWASP Dependency-Track is the third most searched of 10 competitors and the third most recommended in AI answers.

  1. SnykShare of searches 55.8%Mentioned in 3 of 5 AI answersPlace in AI recommendations 2nd
  2. SyftShare of searches 13.6%Mentioned in 3 of 5 AI answersPlace in AI recommendations 4th
  3. OWASP Dependency-TrackShare of searches 11.2%Mentioned in 3 of 5 AI answersPlace in AI recommendations 3rd
  4. CycloneDXShare of searches 9.1%Mentioned in 5 of 5 AI answersPlace in AI recommendations 8th
  5. AnchoreShare of searches 5%Mentioned in 4 of 5 AI answersPlace in AI recommendations 1st

+5 more

OWASP Dependency-Track website (opens in a new tab)

Follow OWASP Dependency-Track and get free monthly updates on what changed

By continuing you'll get index updates and occasional product news from Brandwave. Unsubscribe any time. Privacy

Top SBOM platforms in ChatGPT and Google AI Overviews

In three ChatGPT questions and two Google AI Overviews, OWASP Dependency-Track was mentioned in three out of five: in all three ChatGPT answers, but not in either of the two Google AI Overviews. OWASP Dependency-Track is the third most recommended of the ten.

Most recommended by AI

Brands get a higher ranking if they are mentioned earlier in the answers.

  1. Anchore1st
  2. Snyk2nd
  3. OWASP Dependency-Track3rd
  4. Syft4th
  5. Black Duck5th
  6. FOSSA6th
  7. JFrog Xray7th
  8. CycloneDX8th
  9. Mend–
  10. Cybeats–

Mentioned by AI

Each dot is one answer, filled in when that answer mentions the brand.

  • CycloneDX5 of 5Named in 3 of 3 ChatGPT answersNamed in 2 of 2 Google answers
  • Anchore4 of 5Named in 3 of 3 ChatGPT answersNamed in 1 of 2 Google answers
  • Snyk3 of 5Named in 3 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • Syft3 of 5Named in 2 of 3 ChatGPT answersNamed in 1 of 2 Google answers
  • OWASP Dependency-Track3 of 5Named in 3 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • JFrog Xray2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • Black Duck2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • FOSSA2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • Mend0 of 5Named in 0 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • Cybeats0 of 5Named in 0 of 3 ChatGPT answersNamed in 0 of 2 Google answers

See every answer about SBOM platforms

5 answers

Not named in any answer:

Brands are shown in the order each answer named them. The survey took place in the United States on October 21, 2026.

Which SBOM platforms compete with OWASP Dependency-Track?

OWASP Dependency-Track against SBOM platforms worldwide, by month

Share of searches by month for Snyk, Syft, OWASP Dependency-Track, CycloneDX, Anchore. The figures are in the table below the chart.

View monthly share of searches table
MonthSnykSyftOWASP Dependency-TrackCycloneDXAnchoreJFrog XrayBlack DuckMendCybeatsFOSSA
Oct 202560.7%14.9%8.1%6.6%4.4%1.9%1.5%1%0.88%0.01%
Nov 202556.9%17%9.3%6.2%5.1%2.2%1.4%1.1%0.83%0.01%
Dec 202559.2%14.5%9.7%6.5%4.3%2.3%1.6%1.2%0.86%0.01%
Jan 202656.7%17%9.3%6.2%5%2.2%1.5%1.1%1%0.01%
Feb 202661.3%15%8.2%6.7%3.6%1.9%1.3%1%0.89%0.01%
Mar 202657.7%17.3%9.4%6.3%3.4%2.3%1.7%0.95%0.95%<0.01%
Apr 202659.1%14.5%9.7%6.4%4.3%2.3%1.6%1.3%0.86%<0.01%
May 202660.1%14.7%9.8%6.6%3.6%1.9%1.4%0.99%0.87%<0.01%
Jun 202661%12.2%10%8.2%3.6%1.9%1.5%0.89%0.73%0.01%
Jul 202657%13.9%11.4%7.6%4.1%1.8%2%1.2%0.83%0.01%
Aug 202657.3%14%9.4%9.4%4.2%1.9%1.7%1.2%1%0.01%
Sep 202655.8%13.6%11.2%9.1%5%1.8%1.6%0.99%0.81%0.01%

  1. 1.Snyk

    55.8%

    Held 1st. 49.5K estimated branded searches, 0% vs prior month. Share -1.5 points.

  2. 2.Syft

    13.6%

    Held 2nd. 12.1K estimated branded searches, 0% vs prior month. Share -0.4 points.

  3. 3.OWASP Dependency-Track

    11.2%

    Moved from 4th to 3rd. 9.9K estimated branded searches, +22.2% vs prior month. Share +1.8 points.

  4. 4.CycloneDX

    9.1%

    Moved from 3rd to 4th. 8.1K estimated branded searches, 0% vs prior month. Share -0.2 points.

  5. 5.Anchore

    5%

    Held 5th. 4.4K estimated branded searches, +22.2% vs prior month. Share +0.8 points.

  6. 6.JFrog Xray

    1.8%

    Held 6th. 1.6K estimated branded searches, 0% vs prior month. Share 0 points.

  7. 7.Black Duck

    1.6%

    Held 7th. 1.4K estimated branded searches, 0% vs prior month. Share 0 points.

  8. 8.Mend

    0.99%

    Held 8th. 880 estimated branded searches, -12% vs prior month. Share -0.2 points.

  9. 9.Cybeats

    0.81%

    Held 9th. 720 estimated branded searches, -18.2% vs prior month. Share -0.2 points.

  10. 10.FOSSA

    0.01%

    Held 10th. 10 estimated branded searches, 0% vs prior month. Share 0 points.

Compare popularity between OWASP Dependency-Track and its closest rivals

Every comparison with OWASP Dependency-Track

14 comparisons

How has branded search demand for OWASP Dependency-Track changed worldwide over the last 12 months?

3 findings
  • Across the 12 months ending September 2026, estimated monthly branded searches for OWASP Dependency-Track worldwide rose from 8.1K to 9.9K.
  • Across the 12 months ending September 2026, OWASP Dependency-Track’s share of searches among SBOM platforms worldwide increased from 8.1% to 11.2%.
  • Across the 12 months ending September 2026, OWASP Dependency-Track’s share of searches among SBOM platforms worldwide peaked at 11.4% in July 2026 and was lowest at 8.1% in October 2025.

How did search popularity change for SBOM platforms worldwide in September 2026?

6 changes

  1. In September 2026, OWASP Dependency-Track overtook CycloneDX to rank 3rd among SBOM platforms worldwide, with 11.2% of the searches.

  2. In September 2026, Anchore gained share of searches among SBOM platforms worldwide, from 4.2% to 5%.

  3. In September 2026, Snyk lost share of searches among SBOM platforms worldwide, from 57.3% to 55.8%.

  4. Estimated monthly branded searches for CycloneDX worldwide rose 22.7% over 12 measured months, from 6.6K to 8.1K in September 2026.

  5. Estimated monthly branded searches for Syft worldwide fell 18.2% over 12 measured months, from 14.8K to 12.1K in September 2026.

  6. Estimated monthly branded searches for Cybeats worldwide fell 18.2% over 12 measured months, from 880 to 720 in September 2026.

How are OWASP Dependency-Track’s branded searches counted?

1 search term

Brandwave collects information about searches that people make online using OWASP Dependency-Track’s name. When viewed over time, estimated search volumes for this branded term can be used to understand whether interest in the brand is growing, holding steady, or fading.

  • dependency track

How the Brand Demand Index is measured

Who owns OWASP Dependency-Track?

OWASP Dependency-Track is owned by OWASP Foundation. Brandwave does not track any other brands owned by OWASP Foundation.

Do you work for OWASP Dependency-Track? To request corrections or removal please contact us via our support page and we will be happy to assist.

Where does OWASP Dependency-Track compete?

OWASP Dependency-Track is ranked in two competitor sets. Each share is worked out among that set's brands, so it differs from set to set.
Competitor setRankShare of searchesRanking
Dependency scanning tools4th of 116.8%Show ranking
SBOM platforms3rd of 1011.2%Shown above
Creator with pink hair and a pink jacket

Is OWASP Dependency-Track your brand?

Put your own campaigns, spend and outcomes next to this demand line, so you can see which of your marketing lined up with the movements above.

Start free