Side by side
ts-scan vs Xygeni
Both stand on software composition analysis software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APILinuxMac+2
ts-scan focuses on dependency discovery and SBOM production across many ecosystems. Teams needing reachability or pull-request scans will not find those capabilities listed.
Visit ts-scan Free plan APIExtensionLinux+4
Xygeni combines local scanning with supply-chain checks, secrets detection, and compliance audits. Its free tier has clear contributor, repository, and monthly scan limits to consider.
Visit XygeniThe facts
| ts-scan | Xygeni | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Linux, Mac, Self-hosted, Windows | API, Extension, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Not published | Free or on request |
| Plans published | None | 4 |
| Maker | Not published | Not published |
| Website | trustsource.io | xygeni.io |
| On software composition analysis software | #39 of 65 | #35 of 65 |
ts-scan: what it does well
- Free and open source
- Supports over 20 build systems
- Exports SPDX and CycloneDX SBOMs
- Integrates with GitHub, GitLab, and Jenkins
- Runs on Linux, macOS, and Windows
What to know first
- No reachability analysis
- No pull request scanning
- Package-script behavior changed from version 1.5.2
Xygeni: what it does well
- Scans run within the customer’s network
- Can keep findings locally
- Detects more than 100 secret types
- Free plan includes 200 scans monthly
What to know first
- Free plan is limited to five contributors
- Free plan covers up to 10 repositories
- Free plan caps scans at 200 monthly
Alternatives to ts-scan Alternatives to Xygeni The whole list