Vulert

Vulert: Software composition analysis tool that tracks dependencies for vulnerabilities by analyzing manifest files or SBOMs without requiring source code access.

Vulert performs software composition analysis by scanning uploaded manifest files or Software Bill of Materials (SBOM) for known vulnerabilities. It requires no installation or direct access to source code. The platform monitors dependencies continuously and sends alerts when new vulnerabilities are disclosed for specific versions. It offers version-specific remediation guidance, ensuring that fixes apply to the exact dependency version in use. The service supports ecosystems like Java, JavaScript, PHP, Python, Rust, Ruby, Dart, C++, and Elixir. It integrates with development tools via API, MCP-compatible agents like Cursor or Claude Code, CI/CD pipelines, Slack, and Jira to manage application security at scale.

Vulert at a glance

Best for: Software engineer
Runs on: Web, API, Slack
Pricing: Pro plan $45/mo ($39/mo annually); module-based add-ons available from $13/mo; 30-day free trial included with all plans.
Released: January 2022
Category: AI coding tool
Website: vulert.com

Key features

Version-specific remediation guidance
Continuous dependency monitoring
Automated vulnerability alerting
Support for various SBOM and manifest formats
API access for custom integrations
MCP-compatible agent integration
Compliance and audit reporting

Use it for

Monitoring dependencies in AI-generated code
Managing security risks across large application portfolios
Maintaining vulnerability history for audit and compliance reviews
Scanning container images for vulnerable dependencies

Alternatives to Vulert

VulnClaw — It uses LLM agents to autonomously execute end-to-end security testing loops.
Pixee — Automates vulnerability triage and generates actionable code fixes.
jevgrep — Reduces coding agent costs by providing targeted, relevant repository context.
DeepSource — Automated code reviews that combine static analysis with AI agents.
Sourcery — Automates pull request reviews and bug detection in GitHub and GitLab.
Mantis — Automates vulnerability discovery and patching using AI agents.
CodeScan Artex — It uses multiple parallel AI agents to read source code and verify vulnerabilities.
New Relic — Unified visibility across applications, infrastructure, and AI models.
Zenable — Enforces functional and security requirements across coding agents and pull requests.
Nullify — It fixes vulnerabilities autonomously, from detection to merged code.
Corgea — AI-native security that finds, prioritizes, and fixes code vulnerabilities.
NoVul — Finds vulnerabilities in software, packages, and exposed API keys locally on your Mac.

All Vulert alternatives