Brandwave

OWASP Dependency-Track vs Trivy:Which is more popular?

In September 2026, Trivy had more branded searches than OWASP Dependency-Track among dependency scanning tools worldwide. Trivy had about 40,500 branded searches, while OWASP Dependency-Track had 9,900. Trivy made up 27.7% of all dependency scanning tool searches we track, and OWASP Dependency-Track accounted for 6.8%. When we asked ChatGPT and Google AI Overviews about dependency scanning tools, Trivy appeared in four of the five answers and OWASP Dependency-Track in one. Trivy was mentioned before OWASP Dependency-Track in every answer that named either.

Among dependency scanning tools worldwide in September 2026

Who do people search for more?

Trivy, about 4 searches for every 1 for OWASP Dependency-Track

Trivy 40.5K searchesOWASP Dependency-Track 9.9K searches

Who does AI mention more?

Trivy, mentioned in 4 of 5 answers, OWASP Dependency-Track in 1

Trivy in 4 of 5OWASP Dependency-Track in 1 of 5

Who does AI recommend more?

Trivy, named ahead of OWASP Dependency-Track in 4 of 4 answers

Trivy first in 4OWASP Dependency-Track never first

Follow OWASP Dependency-Track vs Trivy and get free monthly updates on what changed

By continuing you'll get index updates and occasional product news from Brandwave. Unsubscribe any time. Privacy

Track your brand against a rival →

Top dependency scanning tools in ChatGPT and Google AI Overviews

In three ChatGPT questions and two Google AI Overviews, Trivy was mentioned in four out of five: in two of the three ChatGPT answers and in both Google AI Overviews. OWASP Dependency-Track was mentioned in one out of five: not in any of the three ChatGPT answers, but in one of the two Google AI Overviews. Trivy was listed before OWASP Dependency-Track in every answer that named either.

Most recommended by AI

Brands get a higher ranking if they are mentioned earlier in the answers.

  1. Trivy1st
  2. Dependabot2nd
  3. Snyk3rd
  4. OWASP Dependency-Check4th
  5. Socket5th
  6. Sonatype6th
  7. Renovate7th
  8. Mend8th
  9. Black Duck9th
  10. OWASP Dependency-Track10th
  11. +1 more

Mentioned by AI

Each dot is one answer, filled in when that answer mentions the brand.

  • Trivy4 of 5Named in 2 of 3 ChatGPT answersNamed in 2 of 2 Google answers
  • Dependabot4 of 5Named in 3 of 3 ChatGPT answersNamed in 1 of 2 Google answers
  • Snyk3 of 5Named in 3 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • OWASP Dependency-Check3 of 5Named in 1 of 3 ChatGPT answersNamed in 2 of 2 Google answers
  • Sonatype2 of 5Named in 1 of 3 ChatGPT answersNamed in 1 of 2 Google answers
  • Renovate2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • Socket2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • Black Duck2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • Mend2 of 5Named in 2 of 3 ChatGPT answersNamed in 0 of 2 Google answers
  • OWASP Dependency-Track1 of 5Named in 0 of 3 ChatGPT answersNamed in 1 of 2 Google answers

+1 more

See every answer about dependency scanning tools

5 answers

Not named in any answer:

Brands are shown in the order each answer named them. The survey took place in the United States on October 20, 2026.

Is OWASP Dependency-Track or Trivy more popular in search?

This chart shows how often people search Google for OWASP Dependency-Track and Trivy by name. Each line represents a brand's share of searches for all 11 dependency scanning tools we track, month by month, from English-language searches worldwide.

OWASP Dependency-Track and Trivy among dependency scanning tools worldwide, by month

Share of searches by month for Trivy, OWASP Dependency-Track. The figures are in the table below the chart.

View monthly share of searches table
MonthSnykTrivyDependabotOWASP Dependency-TrackSonatypeRenovateOWASP Dependency-CheckSocketBlack DuckMendFOSSA
Oct 202543.6%19.5%13%5.8%7.1%3.2%4.8%1.2%1.1%0.72%<0.01%
Nov 202540.2%22%12%6.6%8%3.6%4.4%1.3%0.98%0.81%<0.01%
Dec 202539.8%21.8%14.5%6.5%6.5%3.5%4.3%1.2%1.1%0.8%<0.01%
Jan 202639.2%21.5%14.3%6.4%7.8%3.5%4.3%1.1%1%0.79%<0.01%
Feb 202644%19.7%13.2%5.9%7.2%3.9%3.2%1.2%0.95%0.73%<0.01%
Mar 202626.3%47.7%9.6%4.3%4.3%2.9%2.3%1.4%0.76%0.43%<0.01%
Apr 202635.6%29.2%13.1%5.8%5.8%3.2%3.2%2.4%0.94%0.77%<0.01%
May 202639%21.3%14.3%6.4%6.4%3.5%2.8%4.6%0.93%0.64%<0.01%
Jun 202639.8%21.8%14.6%6.5%6.5%3.6%3.6%2.1%0.95%0.58%<0.01%
Jul 202635.4%23.7%15.9%7.1%7.1%3.9%3.1%1.9%1.3%0.72%<0.01%
Aug 202633.8%27.6%15.1%5.5%6.8%3.7%2.5%3.3%0.98%0.68%<0.01%
Sep 202633.9%27.7%15.2%6.8%6.8%3.7%2.5%2%0.98%0.6%<0.01%

How has the OWASP Dependency-Track and Trivy comparison changed over the last 12 months?

3 findings

How did search popularity change for dependency scanning tools worldwide in September 2026?

2 changes

  1. In September 2026, OWASP Dependency-Track overtook Sonatype to rank 4th among dependency scanning tools worldwide, with 6.8% of the searches.

  2. Trivy’s share of searches among dependency scanning tools worldwide has gained ground for 3 months in a row, from 21.8% to 27.7% in September 2026.

How are branded searches counted?

2 search terms

Brandwave collects information about searches that people make online using OWASP Dependency-Track’s and Trivy’s names. When viewed over time, estimated search volumes for these branded terms can be used to understand whether interest in the brands is growing, holding steady, or fading.

OWASP Dependency-Track

1 branded search term

  • dependency track

Trivy

1 branded search term

  • trivy

How the Brand Demand Index is measured

Other head-to-heads among dependency scanning tools

Creator with pink hair and a pink jacket

Put your own brand in this comparison

Brandwave tracks your branded demand next to the rival you actually watch, with your campaigns, spend and outcomes on the same timeline.

Start free