The Forrester Wave™: Software Composition Analysis, Q2 2019
In Forrester’s 33-criterion evaluation of software composition analysis providers, Forrester identified the 10 most significant ones — WhiteSource, Flexera, FOSSA, GitLab, JFrog,Snyk, Sonatype, Synopsys, Veracode and WhiteHat Security— and researched, analyzed,and scored them. This report shows how each provider measures up and helps security professionals select the right one for their needs.