Freedom251 › Software Composition Analysis Software
ComplyVigilance SCA
What ComplyVigilance SCA is
ComplyVigilance SCA provides software composition analysis, vulnerability management, and compliance automation across the software development lifecycle. It analyzes dependencies across more than 10 languages and ecosystems for vulnerabilities and license compliance, and scans container base images and application layers for vulnerabilities and component metadata. It generates SBOMs in CycloneDX 1.5+, SPDX 2.3, and VEX formats, and can import external SBOMs. Interfaces include a CLI, desktop app, and web portal. The free tier provides full-scope dependency analysis and deep transitive dependency coverage through SaaS-only access. Foundation costs €120 a year per contributor and includes license management, vulnerability scanning, CI/CD integrations, and SBOM generation and maintenance. Professional costs €200 a year per contributor and adds container and signature scanning, license compliance automation, policy enforcement, and limited Optimus AI workflows. Enterprise pricing is on request and includes full Optimus AI, dedicated dashboards, API and SIEM integrations, and on-premises or hybrid deployment. The maker describes its platform as EU-built and EU-hosted and lists support by email and phone, typically responding within 24 hours on business days.
Who it suits
ComplyVigilance SCA is aimed at engineering, security, product security, legal, procurement, and compliance teams managing software supply-chain risk. Its free tier may suit teams seeking dependency analysis through SaaS access.
What it does well
- Analyzes dependencies across 10+ languages and ecosystems.
- Generates and imports SBOMs in several listed formats.
- Container scanning covers base images and application layers.
- A free SaaS tier is available.
What to know first
- The free tier is SaaS-only.
- CI/CD integrations are included in Foundation and higher tiers.
- API and SIEM integrations are listed for Enterprise.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | Full Scope Dependency Analysis · Deep Transitive Dependency Coverage · SaaS-only access | Free |
| Foundation | €120/ contributor/ year · Per contributor · License management · Vulnerability scanning · CI/CD integrations · SBOM generation and maintenance | €120 a year |
| Professional | €200/ contributor/ year · Per contributor · Container and signature scanning · License compliance automation · Limited Optimus AI workflows · Policy enforcement · Advanced audit reporting | €200 a year |
| Enterprise | Contact Sales · Full Optimus AI · On-premises or hybrid deployment · Dedicated dashboards · API and SIEM integrations | On request |
As complyvigilance.com lists them, read 5 Oct 2026. The maker's own page has the final word.
Verdict
ComplyVigilance SCA covers dependency and container analysis, SBOMs, and compliance workflows, with capabilities varying by tier. Teams should compare the free tier's SaaS-only access with the paid plans' integration and deployment options.
Facts from ComplyVigilance SCA's own pages
- Availability limit
- The pricing page lists self-healing compliance database and advanced audit reporting as Enterprise features. · complyvigilance.com, 5 Oct 2026
- Compliance
- The maker says ComplyVigilance automates license monitoring, usage analysis, and compliance checks while detecting supply-chain vulnerabilities. · complyvigilance.com, 5 Oct 2026
- Container scanning
- Container scanning examines base images and application layers for vulnerabilities and component metadata. · complyvigilance.com, 5 Oct 2026
- Dependency analysis
- The product analyzes dependencies across 10+ languages and ecosystems, including vulnerability detection and license compliance. · complyvigilance.com, 5 Oct 2026
- Integrations
- CI/CD integrations are included in Foundation and higher tiers; API and SIEM integrations are listed for Enterprise. · complyvigilance.com, 5 Oct 2026
- Interfaces
- The product offers a CLI, a desktop app, and a web portal. · complyvigilance.com, 5 Oct 2026
- Product
- ComplyVigilance SCA provides software composition analysis, vulnerability management, and compliance automation across the software development lifecycle. · complyvigilance.com, 5 Oct 2026
- SBOM
- SBOM generation supports CycloneDX 1.5+, SPDX 2.3, and VEX formats, and the product also supports importing external SBOMs. · complyvigilance.com, 5 Oct 2026
- Security and hosting
- The maker describes the platform as EU-built and EU-hosted, and lists on-premises or hybrid deployment for Enterprise. · complyvigilance.com, 5 Oct 2026
- Security intelligence
- The maker describes an AI-powered knowledge base with real-time CVE updates, contextual metadata, and more than one million vulnerability records. · complyvigilance.com, 5 Oct 2026
- Support
- The maker lists support by email and phone and says it typically responds to inquiries within 24 hours on business days. · complyvigilance.com, 5 Oct 2026
- Who it serves
- The maker identifies enterprise engineering teams, security and product security functions, and legal, procurement, and compliance stakeholders as its audiences. · complyvigilance.com, 5 Oct 2026