Anchore vs OWASP Dependency-Track:Which is more popular?
In September 2026, OWASP Dependency-Track had more branded searches than Anchore among SBOM platforms worldwide. OWASP Dependency-Track had about 9,900 branded searches, while Anchore had 4,400. OWASP Dependency-Track made up 11.2% of all SBOM platform searches we track, and Anchore accounted for 5%. When we asked ChatGPT and Google AI Overviews about SBOM platforms, Anchore appeared in four of the five answers and OWASP Dependency-Track in three. Anchore was mentioned before OWASP Dependency-Track in three out of four answers.
Who do people search for more?
OWASP Dependency-Track, about 2 searches for every 1 for Anchore
Who does AI mention more?
Anchore, mentioned in 4 of 5 answers, OWASP Dependency-Track in 3
Who does AI recommend more?
Anchore, named ahead of OWASP Dependency-Track in 3 of 4 answers
Follow Anchore vs OWASP Dependency-Track and get free monthly updates on what changed
By continuing you'll get index updates and occasional product news from Brandwave. Unsubscribe any time. Privacy
Top SBOM platforms in ChatGPT and Google AI Overviews
In three ChatGPT questions and two Google AI Overviews, Anchore was mentioned in four out of five: in all three ChatGPT answers and in one of the two Google AI Overviews. OWASP Dependency-Track was mentioned in three out of five: in all three ChatGPT answers, but not in either of the two Google AI Overviews. Anchore was listed before OWASP Dependency-Track in three out of four answers.
Most recommended by AI
Brands get a higher ranking if they are mentioned earlier in the answers.
Anchore1st
Snyk2nd
OWASP Dependency-Track3rd
Syft4th
Black Duck5th
FOSSA6th- JFrog Xray7th
CycloneDX8th
Mend–
Cybeats–
Mentioned by AI
Each dot is one answer, filled in when that answer mentions the brand.
CycloneDX5 of 5Named in 3 of 3 ChatGPT answersNamed in 2 of 2 Google answers
Anchore4 of 5Named in 3 of 3 ChatGPT answersNamed in 1 of 2 Google answers
Snyk3 of 5Named in 3 of 3 ChatGPT answersNamed in 0 of 2 Google answers
Syft3 of 5Named in 2 of 3 ChatGPT answersNamed in 1 of 2 Google answers
OWASP Dependency-Track3 of 5Named in 3 of 3 ChatGPT answersNamed in 0 of 2 Google answers- JFrog Xray2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
Black Duck2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
FOSSA2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
Mend0 of 5Named in 0 of 3 ChatGPT answersNamed in 0 of 2 Google answers
Cybeats0 of 5Named in 0 of 3 ChatGPT answersNamed in 0 of 2 Google answers
See every answer about SBOM platforms
5 answers
Asked ChatGPT
“Which SBOM platform should I use?”
Asked ChatGPT
“What are the best SBOM platforms?”
Asked ChatGPT
“What's the best SBOM platform for a software team?”
Searched Google, AI Overview
“sbom tools”
Searched Google, AI Overview
“software bill of materials”
Brands are shown in the order each answer named them. The survey took place in the United States on October 21, 2026.
Is Anchore or OWASP Dependency-Track more popular in search?
This chart shows how often people search Google for Anchore and OWASP Dependency-Track by name. Each line represents a brand's share of searches for all ten SBOM platforms we track, month by month, from English-language searches worldwide.
Share of searches by month for OWASP Dependency-Track, Anchore. The figures are in the table below the chart.
View monthly share of searches table
| Month | Snyk | Syft | OWASP Dependency-Track | CycloneDX | Anchore | JFrog Xray | Black Duck | Mend | Cybeats | FOSSA |
|---|---|---|---|---|---|---|---|---|---|---|
| Oct 2025 | 60.7% | 14.9% | 8.1% | 6.6% | 4.4% | 1.9% | 1.5% | 1% | 0.88% | 0.01% |
| Nov 2025 | 56.9% | 17% | 9.3% | 6.2% | 5.1% | 2.2% | 1.4% | 1.1% | 0.83% | 0.01% |
| Dec 2025 | 59.2% | 14.5% | 9.7% | 6.5% | 4.3% | 2.3% | 1.6% | 1.2% | 0.86% | 0.01% |
| Jan 2026 | 56.7% | 17% | 9.3% | 6.2% | 5% | 2.2% | 1.5% | 1.1% | 1% | 0.01% |
| Feb 2026 | 61.3% | 15% | 8.2% | 6.7% | 3.6% | 1.9% | 1.3% | 1% | 0.89% | 0.01% |
| Mar 2026 | 57.7% | 17.3% | 9.4% | 6.3% | 3.4% | 2.3% | 1.7% | 0.95% | 0.95% | <0.01% |
| Apr 2026 | 59.1% | 14.5% | 9.7% | 6.4% | 4.3% | 2.3% | 1.6% | 1.3% | 0.86% | <0.01% |
| May 2026 | 60.1% | 14.7% | 9.8% | 6.6% | 3.6% | 1.9% | 1.4% | 0.99% | 0.87% | <0.01% |
| Jun 2026 | 61% | 12.2% | 10% | 8.2% | 3.6% | 1.9% | 1.5% | 0.89% | 0.73% | 0.01% |
| Jul 2026 | 57% | 13.9% | 11.4% | 7.6% | 4.1% | 1.8% | 2% | 1.2% | 0.83% | 0.01% |
| Aug 2026 | 57.3% | 14% | 9.4% | 9.4% | 4.2% | 1.9% | 1.7% | 1.2% | 1% | 0.01% |
| Sep 2026 | 55.8% | 13.6% | 11.2% | 9.1% | 5% | 1.8% | 1.6% | 0.99% | 0.81% | 0.01% |
How has the Anchore and OWASP Dependency-Track comparison changed over the last 12 months?
3 findings
- OWASP Dependency-Track was ahead of Anchore in every measured month of the 12 months ending September 2026.
- Across the 12 months ending September 2026, Anchore’s share of searches among SBOM platforms worldwide moved from 4.4% to 5%, and its estimated monthly branded searches held steady at 4.4K.
- Across the 12 months ending September 2026, OWASP Dependency-Track’s share of searches among SBOM platforms worldwide moved from 8.1% to 11.2%, and its estimated monthly branded searches moved from 8.1K to 9.9K.
How did search popularity change for SBOM platforms worldwide in September 2026?
2 changes

In September 2026, OWASP Dependency-Track overtook CycloneDX to rank 3rd among SBOM platforms worldwide, with 11.2% of the searches.

In September 2026, Anchore gained share of searches among SBOM platforms worldwide, from 4.2% to 5%.
How are branded searches counted?
2 search terms
Brandwave collects information about searches that people make online using Anchore’s and OWASP Dependency-Track’s names. When viewed over time, estimated search volumes for these branded terms can be used to understand whether interest in the brands is growing, holding steady, or fading.
Anchore
1 branded search term
- anchore
OWASP Dependency-Track
1 branded search term
- dependency track
Other head-to-heads among SBOM platforms

Put your own brand in this comparison
Brandwave tracks your branded demand next to the rival you actually watch, with your campaigns, spend and outcomes on the same timeline.