Alternatives to Craftifact
Compare Craftifact alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Craftifact in 2026. Compare features, ratings, user reviews, pricing, and more from Craftifact competitors and alternatives in order to make an informed decision for your business.
-
1
QVscribe
QRA
QVscribe, QRA's flagship product, unifies stakeholders by ensuring clear, concise artifacts. It automatically evaluates requirements, identifies risks, and guides engineers to address them. QVscribe simplifies artifact management by eliminating errors and verifying compliance with quality and industry standards. QVscribe Features: Glossary Integration: QVscribe now adds a fourth dimension by ensuring consistency across teams using different authoring tools. Term definitions appear alongside Quality Alerts, Warnings, and EARS Conformance checks within the project context. Customizable Configurations: Tailor QVscribe to meet specific verification needs for requirements, including business and system documents. This flexibility helps identify issues early before estimates or development progress. Integrated Guidance: QVscribe offers real-time recommendations during the editing process, helping authors effortlessly correct problem requirements and improve their quality. -
2
Revenera SCA
Revenera
Take control of your open source software management. Empower your organization to manage open source software (OSS) and third-party components. FlexNet Code Insight helps development, legal and security teams to reduce open source security risk and manage license compliance with an end-to-end system. FlexNet Code Insight is a single integrated solution for open source license compliance and security. Find vulnerabilities and remediate associated risk while you build your products and during their entire lifecycle. Manage open source license compliance, add automation to your processes, and implement a formal OSS strategy that balances business benefits and risk management. Integrate with build tools, CI/CD and SCM tools, artifact repositories, external repositories or build your own integrations using the FlexNet Code Insight REST API framework to make code scanning easy and effective. -
3
JFrog Artifactory
JFrog
The Industry Standard Universal Binary Repository Manager. Supports all major package types (over 27 and growing) such as Maven, npm, Python, NuGet, Gradle, Go, and Helm including Kubernetes and Docker as well as integration with leading CI servers and DevOps tools that you already use. Additional functionalities include: - High Availability that scales to infinity with active/active clustering of your DevOps environment and scales as business grows - On-Prem, Cloud, Hybrid, or Multi-Cloud Solution - De Facto Kubernetes Registry managing application packages, operating system’s component dependencies, open source libraries, Docker containers, and Helm charts with full visibility of all dependencies. Compatible with a growing list of Kubernetes cluster providers. -
4
Docker
Docker
Docker takes away repetitive, mundane configuration tasks and is used throughout the development lifecycle for fast, easy and portable application development, desktop and cloud. Docker’s comprehensive end-to-end platform includes UIs, CLIs, APIs and security that are engineered to work together across the entire application delivery lifecycle. Get a head start on your coding by leveraging Docker images to efficiently develop your own unique applications on Windows and Mac. Create your multi-container application using Docker Compose. Integrate with your favorite tools throughout your development pipeline, Docker works with all development tools you use including VS Code, CircleCI and GitHub. Package applications as portable container images to run in any environment consistently from on-premises Kubernetes to AWS ECS, Azure ACI, Google GKE and more. Leverage Docker Trusted Content, including Docker Official Images and images from Docker Verified Publishers.Starting Price: $7 per month -
5
Sonatype Nexus Repository
Sonatype
Sonatype Nexus Repository is a robust binary repository manager designed to store, manage, and distribute open-source components, dependencies, and artifacts across the software development lifecycle (SDLC). It supports over 20 formats, including Maven, npm, PyPI, and Docker, allowing for seamless integration with build tools and CI/CD pipelines. With advanced features like high availability, disaster recovery, and scalability across cloud platforms, Nexus Repository ensures secure and efficient management of your software artifacts. The platform enhances collaboration, automates workflows, and improves visibility into your software supply chain, helping teams manage dependencies and improve software quality. -
6
Dist
Dist
Highly available and super fast artifact repositories and container registries that keep your developers, operations teams, and customers happy and productive. Dist is the simplest and most reliable way to securely distribute Docker container images and Maven artifacts across your team, systems, and customers. Our purpose-built edge network ensures optimal performance, wherever your team and customers are. Dist is fully managed in the cloud. We take care of operations, maintenance, and backups so you can focus on your business. Restrict access to repositories by users and groups. Each user can further compartmentalize their own access using access tokens. All artifacts, container images, and their associated metadata are encrypted at rest and in transit.Starting Price: $39 per month -
7
Artifact Registry is Google Cloud’s unified, fully managed package and container registry designed for high-performance artifact storage and dependency management. It centralizes hosting of container images (Docker/OCI), Helm charts, language packages (Java/Maven, Node.js/npm, Python), and OS packages, offering fast, scalable, reliable, and secure handling with built-in vulnerability scanning and IAM-based access control. Integrated seamlessly with Google Cloud CI/CD tools like Cloud Build, Cloud Run, GKE, Compute Engine, and App Engine, it supports regional and virtual repositories with granular security via VPC Service Controls and customer-managed encryption keys. Developers benefit from standardized Docker Registry API support, comprehensive REST/RPC interfaces, and migration paths from Container Registry. Daily updated documentation includes quickstarts, repository management, access configuration, observability tools, and deep-dive guides.
-
8
AWS CodeArtifact
Amazon
Store and share artifacts across accounts, with appropriate levels of access granted to your teams and build systems. Reduce overhead from setup and maintenance of an artifact server or infrastructure with a fully managed service. Only pay for software packages stored, number of requests made, and data transferred out of Region with pay-as-you-go pricing. Configure CodeArtifact to fetch from public repositories such as the npm Registry, Maven Central, Python Package Index (PyPI), and NuGet. Securely share private packages across organizations by publishing them to a central organizational repository. Build automated approval workflows with CodeArtifact APIs and Amazon EventBridge, with visibility into your packages using AWS CloudTrail. Pull dependencies from CodeArtifact in AWS CodeBuild and publish new versions of your private packages secured with AWS Identity and Access Management (IAM).Starting Price: $0.05 per GB per month -
9
Azure Container Registry
Microsoft
Build, store, secure, scan, replicate, and manage container images and artifacts with a fully managed, geo-replicated instance of OCI distribution. Connect across environments, including Azure Kubernetes Service and Azure Red Hat OpenShift, and across Azure services like App Service, Machine Learning, and Batch. Geo-replication to efficiently manage a single registry across multiple regions. OCI artifact repository for adding helm charts, singularity support, and new OCI artifact-supported formats. Automated container building and patching including base image updates and task scheduling. Integrated security with Azure Active Directory (Azure AD) authentication, role-based access control, Docker content trust, and virtual network integration. Streamline building, testing, pushing, and deploying images to Azure with Azure Container Registry Tasks.Starting Price: $0.167 per day -
10
Azure Artifacts
Microsoft
Add fully integrated package management to your continuous integration/continuous delivery (CI/CD) pipelines with a single click. Create and share Maven, npm, NuGet, and Python package feeds from public and private sources with teams of any size. Create and share Maven, npm, NuGet, and Python package feeds from public and private sources. Easily share code across small teams and large enterprises. Get universal artifact management for Maven, npm, NuGet, and Python. Share packages, and use built-in CI/CD, versioning, and testing. Share code effortlessly by storing Maven, npm, NuGet, and Python packages together. And there's no need to store binaries in Git, simply store them using Universal Packages. Keep every public source package you use, including packages from npmjs and nuget.org, safe in your feed where only you can delete it, and where it's backed by the enterprise-grade Azure SLA.Starting Price: $6 per user per month -
11
CloudRepo
CloudRepo
CloudRepo provides fully managed, cloud-based, private repositories. With CloudRepo, developers store and access Public and Private, Maven, and Python repositories in the cloud. CloudRepo stores your maven repositories across multiple physical servers reducing the probability of data loss & maven repository downtime due to hardware failure. We help reduce time and resources spent running unsecured & vulnerable maven repositories, which allows everyone to focus on developing more. Your team has completed all this developing to ultimately distribute your repositories. Use the Software Distribution feature to make sure your repositories get in the right hands.Starting Price: $79 per month -
12
packagecloud
packagecloud
Fast, reliable, and secure software starts here. A unified, developer-friendly interface for all of your artifacts written in any language, delivered to any infrastructure. Ship securely and quickly knowing your packages are handled by packagecloud. Consistent package repositories, at enterprise scale and startup speed. A single API and CLI for every environment and package type. Works seamlessly and harmoniously with the systems you already use. Manage all of your packages and deploy to any environment, from one beautiful interface, on-premise or in the cloud. Packagecloud supports the most popular package types, from Java to Python to Ruby and Node, and more. Built for teams with collaboration and access control features. Packagecloud just works. Upload any supported package type via a single, consistent API and deploy with ease. We run thousands of tests to ensure correct and consistent behavior even in the face of bugs in the packaging systems themselves.Starting Price: $150 per month -
13
CycloneDX
CycloneDX
OWASP CycloneDX is a lightweight Software Bill of Materials (SBOM) standard designed for use in application security contexts and supply chain component analysis. Strategic direction and maintenance of the specification is managed by the CycloneDX Core working group, with origins in the OWASP community. A complete and accurate inventory of all first-party and third-party components is essential for risk identification. BOMs should ideally contain all direct and transitive components and the dependency relationships between them. Adopting CycloneDX allows organizations to quickly meet these minimum requirements and mature into using more sophisticated use cases over time. CycloneDX is capable of achieving all SBOM requirements defined in the OWASP Software Component Verification Standard (SCVS). -
14
Perforce TeamHub
Perforce
Your code repository software is where you store your source code. This might be a Mercurial, Git, or SVN repository. Perforce TeamHub (formerly Helix TeamHub) can host your source code repository, whether it’s Mercurial, Git, or SVN. You can add multiple repositories in one project — or create a separate project for each repository. Perforce TeamHub can host more than your code repositories. You can manage and maintain all of your software assets in one spot. This includes build artifacts (Maven, Ivy) and Docker container registries. It also includes private file sharing through WebDAV repositories for your other binary files. You can use TeamHub on its own or alongside P4 to maintain a single source of truth across development teams. For example, you can keep large binary files in P4, then combine those files with Git assets from Perforce TeamHub in a hybrid workspace to achieve high build performance.Starting Price: $1.05/month -
15
Easily store, share, and deploy your container software anywhere. Push container images to Amazon ECR without installing or scaling infrastructure, and pull images using any management tool. Share and download images securely over Hypertext Transfer Protocol Secure (HTTPS) with automatic encryption and access controls. Access and distribute your images faster, reduce download times, and improve availability using a scalable, durable architecture. Amazon ECR is a fully managed container registry offering high-performance hosting, so you can reliably deploy application images and artifacts anywhere. Meet your organization’s image compliance security requirements using insights from common vulnerabilities and exposures (CVEs) and the Common Vulnerability Scoring System (CVSS). Publish containerized applications with a single command and easily integrate your self-managed environments.
-
16
Harness
Harness
Harness is an AI-native software delivery platform that helps engineering teams achieve excellence by automating and streamlining the entire software delivery lifecycle. It enables continuous integration, continuous delivery, and GitOps for multi-cloud, multi-region deployments with increased speed and reliability. Harness simplifies infrastructure as code, database DevOps, and artifact management to improve collaboration and reduce errors. The platform offers AI-powered testing, incident response, chaos engineering, and feature management to enhance quality and resilience. Harness also provides cloud cost management, security testing orchestration, and developer insights to optimize performance and governance. Trusted by leading enterprises, Harness accelerates innovation while reducing manual effort and risk. -
17
IBM DevOps Build
IBM
DevOps Build is a distributed, multiplatform build-management tool for configuring and running software builds. Facilitate complex project builds based on project relationships. Create a secure environment that conforms to your organization’s structure and needs. Configure and run your builds with a template-driven process that accelerates feedback. See standard build processes, source control rules, and test reports. Identify project variances. Control who can see and run builds. Save time, and effort when configuring security settings. Generate graphs of complex app makeup and high-performance reports to see project trends. Use the Docker plug-in to build Docker images with DevOps build. Automate cloning a Git repository, tag source artifacts, and publish source-artifact changes. Use tested integrations with tools and technologies from IBM, open source and third parties. -
18
IBM® Rational® Quality Manager is a collaborative, web-based tool that offers comprehensive test planning, test construction, and test artifact management features throughout the development lifecycle. Rational Quality Manager is for test teams of all sizes and supports various user roles, such as test manager, test architect, test lead, tester, and lab manager. The application also supports roles outside the test organization. Comprehensive test planning, test design with test cases, test script construction and reuse. Test execution, test analysis, reporting, and live views. Team collaboration, lab management, web application security, configuration management. and governance. Establish a review and approval process for the test plan and for individual test cases. Manage project requirements and test cases and establish the interdependencies between the two. Define the schedule for each test iteration and track the dates of other important test activities.
-
19
Sonatype Nexus Repository is a powerful binary repository manager designed to streamline the management of open-source and third-party components in your software development lifecycle. The Community Edition, available for free, supports essential features such as integration with popular CI/CD tools, enhanced security for managing components, and support for up to 200,000 requests per day. As your needs scale, Nexus Repository Pro offers additional features like unlimited components, high availability, disaster recovery, and advanced security controls, making it a comprehensive solution for businesses of all sizes.Starting Price: Free
-
20
Red Hat Quay
Red Hat
Red Hat® Quay container image registry provides storage and enables you to build, distribute, and deploy containers. Gain more security over your image repositories with automation, authentication, and authorization systems. Quay is available with OpenShift or as a standalone component. Control access of the registry with multiple identity and authentication providers (including support for teams and organization mapping). Use a fine-grained permissions system to map to your organizational structure. Transport layer security encryption helps you transit between Quay.io and your servers automatically. Integrate with vulnerability detectors (like Clair) to automatically scan your container images. Notifications alert you to known vulnerabilities. Streamline your continuous integration/continuous delivery (CI/CD) pipeline with build triggers, git hooks, and robot accounts. Audit your CI pipeline by tracking API and UI actions. -
21
Docker Scout
Docker
Container images consist of layers and software packages, which are susceptible to vulnerabilities. These vulnerabilities can compromise the security of containers and applications. Docker Scout is a solution for proactively enhancing your software supply chain security. By analyzing your images, Docker Scout compiles an inventory of components, also known as a Software Bill of Materials (SBOM). The SBOM is matched against a continuously updated vulnerability database to pinpoint security weaknesses. Docker Scout is a standalone service and platform that you can interact with using Docker Desktop, Docker Hub, the Docker CLI, and the Docker Scout Dashboard. Docker Scout also facilitates integrations with third-party systems, such as container registries and CI platforms. Reveal and dig into the composition of your images. Ensure that your artifacts align with supply chain best practices.Starting Price: $5 per month -
22
Codenotary
Codenotary
We bring trust and integrity into the software life cycle by providing end-to-end cryptographically verifiable tracking and provenance for all artifacts, actions, and dependencies, at scale. Based on open source immudb, our highspeed, immutable store. Ultra-fast and simple integration with all your existing languages and CI/CD. Codenotary Cloud enables any company, developer, automation engineer, DevOps engineer to secure all stages of a CI/CD pipeline. With Codenotary Cloud® you can easily build immutable, tamper-proof solutions and comply with auditor requirements and regulations and laws. Codenotary Trustcenter enables any company, developer, automation engineer, DevOps engineer to secure all stages of a CI/CD pipeline. Attestation (Notarization & Authentication) of every step in your pipeline including vulnerability scanner results and evidence in a tamper-proof and immutable service enables you to reach Level 3 & 4 of the SLSA (Supply-chain Levels for Software Artifacts). -
23
JMockit
JMockit
The toolkit is provided as a set of artifacts deployed to the Maven Central repository. It requires Java 7 or newer for test execution; tests must use JUnit or TestNG. For instructions on how to add the library to a Java project, see Running tests with JMockit. In this tutorial we examine the APIs available in the library, with the help of example tests (using Java 8). The central API - a single annotation - provides support for the automatic instantiation and initialization of the objects to be tested. Then we have the mocking API (also known as the "Expectations" API), intended for tests which use mocked dependencies. Finally, there is a small faking API (aka the "Mockups" API), which can be used for the creation and application of fake implementations that avoid the full cost of external components.Starting Price: Free -
24
Etactics CMMC Compliance Suite
Etactics
Preparing for the Cybersecurity Maturity Model Certification (CMMC) assessment is a considerable investment from both time and money perspectives. Organizations handling Controlled Unclassified Information (CUI) within the defense industrial base should expect to have an authorized CMMC 3rd Party Assessment Organization (C3PAO) certify their implementation of NIST SP 800-171 security requirements. Assessors will evaluate how the contractor implements each of the 320 objectives across all applicable assets within the scope, including people, facilities, and technologies. The assessment process is expected to involve a review of artifacts, interviews of key personnel, and tests of the technical, administrative, and physical controls. As organizations prepare their body of evidence, they should establish a relationship between the artifacts, the security requirement objectives, and assets within scope. -
25
Buzz
Block Open Source
Buzz is a self-hostable workspace where humans and AI agents build together in the same rooms, on a relay the team owns. One community brings conversations, agents, workflows, repositories, artifacts, documents, search, and automation into a single workspace with one identity model and one event log. Every message, reaction, workflow step, review approval, canvas update, huddle event, and Git action is recorded as a cryptographically signed Nostr event, giving people and processes the same audit trail. Agents are members, not bots: teams add them to channels like colleagues, give them their own keys and scoped memberships, and let them open repositories, send patches, review code, run workflows, edit canvases, orchestrate other agents, create channels, join voice huddles, and bring the right people into the work. Buzz can search project history and return answers with supporting threads, patches, runs, and approvals.Starting Price: Free -
26
Testkube
Testkube
Define a test execution consisting of a tool, test repository, and any arguments/parameters. Run any testing tools out of the box with Testkube-supplied workflows, or build your own custom workflow. Combine similar or dissimilar test execution workflows into suites. Create a searchable repository of ready-to-run test executions. Use proactive triggers to start test executions from CI/CD events, manually or on a schedule. Listen for Kubernetes infrastructure events, such as deployments, to automatically trigger test executions. Leverage Kubernetes native scalability to scale the number of concurrent test executions. Access advanced scaling capabilities to scale load tests from one to 1,000. Parallelize to scale functional tests to speed completion. Access logs and artifacts created by executing test tools in a centralized repository. Quickly find errors with log highlighting of failure-related keywords. -
27
Sonatype SBOM Manager
Sonatype
Sonatype SBOM Manager is a comprehensive solution for creating, managing, and monitoring Software Bills of Materials (SBOMs), ensuring compliance with global regulations and strengthening the security of your software supply chain. It supports the generation and analysis of SBOMs in CycloneDX and SPDX formats, integrating with both third-party software and internal applications. SBOM Manager automates vulnerability scanning, tracks software components, and alerts teams to security risks, making it easier to meet regulatory requirements. With advanced features like real-time monitoring, customizable reporting, and continuous security updates, SBOM Manager helps organizations proactively manage open-source risks and improve software security posture. -
28
Credo AI
Credo AI
Standardize your AI governance efforts across diverse stakeholders, ensure regulatory readiness of your governance processes, and measure and manage your AI risks and compliance. Go from fragmented teams and processes to a centralized repository of trusted governance that makes it easy to ensure all of your AI/ML projects are being governed effectively. Stay up-to-date with the latest regulations and standards with AI Policy Packs that meet current and emerging regulations. Credo AI is an intelligence layer that sits on top of your AI infrastructure and translates technical artifacts into actionable risk & compliance insights for product leaders, data scientists, and governance teams. Credo AI is an intelligence layer that sits on top of your technical and business infrastructure and translates technical artifacts into risk and compliance scores. -
29
BuildNinja
BuildNinja
BuildNinja is a self-hosted CI/CD platform designed to help growing teams deploy code quickly without unnecessary complexity. It eliminates the pain of per-seat pricing and fragile pipelines by offering unlimited users and agents at a predictable monthly cost. BuildNinja deploys in minutes using Docker and works out of the box with minimal configuration. The platform provides full visibility into builds with detailed logs, duration analytics, and real-time agent monitoring. Teams can manage source control, build steps, artifacts, and notifications from one clean, centralized interface. Built-in email alerts notify teams instantly when builds succeed or fail without extra setup. Overall, BuildNinja helps teams focus on shipping features instead of maintaining pipelines.Starting Price: 0 -
30
Jozu
Jozu
Jozu is an AI supply chain security platform that verifies artifacts before execution, governs agent activity at runtime, and preserves proof of what happened afterward. Jozu Hub provides a self-hosted registry for models, agents, MCP servers, and skills, centralizing each artifact with cryptographic signatures, attestations, scanning, policy controls, and audit records. Its AI-specific security analysis covers threats such as executable code hidden in model packages, backdoored weights, data poisoning, prompt injection, compromised tools, and license violations. Policies can be authored once, distributed as signed OCI artifacts, and enforced when artifacts are pulled, promoted, admitted, or executed. Jozu Agent Guard runs alongside workloads on servers, desktops, edge devices, and air-gapped systems, applying local prompt and input-output filtering, tool-access controls, approval requirements, and runtime policy enforcement. -
31
Planview Hub
Planview
Planview Hub is a no-code integration product connecting and synchronizing tools used across software delivery. It automates artifact flow between best-of-breed tools, eliminating manual data entry and broken traceability. Key capabilities: • Model-based integration: tools map to a shared model once, cutting setup and maintenance effort versus point-to-point approaches • 60+ pre-built connectors across requirements, agile planning, testing, ITSM, version control, and CI/CD tools, tested daily against version changes • Enterprise Data Stream: near real-time artifact data streaming for BI and cross-tool analytics • Bi-directional sync, conditional routing, and artifact relationship management • Universal Connector for custom connections to unsupported tools • Available as a managed cloud service or on-premises, in Pro, Enterprise, and Ultimate editions -
32
Azure DevOps Labs
Microsoft
Azure DevOps Labs is a free, community-driven collection of self-paced, hands-on tutorials designed to teach every aspect of the Azure DevOps toolchain and related DevOps practices. From configuring Agile planning with Azure Boards and version control in Azure Repos to defining build and release pipelines as code with YAML, enabling CI/CD in Azure Pipelines, managing packages in Azure Artifacts, and orchestrating tests with Azure Test Plans, each lab provides step-by-step exercises and sample code repositories. You can spin up ready-made projects using the Azure DevOps Demo Generator, explore end-to-end scenarios like deploying Docker-based web applications, integrating Terraform for infrastructure-as-code, scanning for security vulnerabilities, monitoring performance with Application Insights, and automating database changes with Redgate. Prerequisites include an Azure DevOps organization and an Azure subscription, but no prior experience is required. -
33
SBOM Archi
SBOM Archi
SBOM Archi is a continuous SBOM risk management platform designed for modern software supply chains. It enables organizations to identify, monitor, and prioritize risks across vulnerabilities, open-source licenses, and component lifecycles in real time. Unlike traditional SBOM tools that generate static reports, SBOM Archi provides continuous monitoring and actionable insights, helping teams stay ahead of emerging risks. The platform integrates industry-standard formats such as SPDX and CycloneDX, ensuring compatibility across diverse development environments. It also supports risk prioritization using CVSS and EPSS, allowing security and engineering teams to focus on the most critical issues. Built for DevSecOps and enterprise environments, SBOM Archi helps organizations meet regulatory requirements such as the EU Cyber Resilience Act (CRA 2027) and US Executive Order 14028, while transforming SBOM from a compliance requirement into an operational security capability. -
34
HashiCorp Waypoint
HashiCorp
Waypoint uses a single configuration file and common workflow to manage and observe deployments across platforms such as Kubernetes, Nomad, EC2, Google Cloud Run, and more. Waypoint builds applications for any language or framework. You can use Buildpacks for automatically building common frameworks or custom Dockerfiles or other build tools for more fine-grained control. The build step is where your application and assets are compiled, validated, and an artifact is created. This artifact can be published to a remote registry or simply passed to the deploy step. Waypoint deploys artifacts created by the build step to a variety of platforms, from Kubernetes to EC2 to static site hosts. It configures your target platform and prepares the new application version to be publicly accessible. Deployments are accessible via a preview URL prior to release. Waypoint releases your staged deployments and makes them accessible to the public. -
35
Cybeats
Cybeats
Cybeats Technologies delivers a powerful platform for Software Supply Chain Security that helps organizations manage, analyze, and share their Software Bills of Materials (SBOMs) with confidence. Its flagship product, SBOM Studio, enables companies to store, enrich, and continuously monitor SBOMs across thousands of applications. By simplifying vulnerability lifecycle management, Cybeats accelerates remediation while maintaining compliance with emerging global cybersecurity regulations. The platform supports open standards like SPDX and CycloneDX, ensuring interoperability and transparency across the ecosystem. Cybeats empowers security teams to detect, prioritize, and mitigate risks efficiently, saving hundreds of hours per project. Trusted by global technology leaders, Cybeats enhances product security, strengthens customer trust, and builds resilient software supply chains. -
36
display.dev
display.dev
display.dev is a gated publishing engine for agent-generated artifacts, giving every HTML report, dashboard, spec, design prototype, or document a permanent, authenticated home. Agents already create sharp artifacts with interactive charts, live filters, hover states, and real layouts, but sharing them often breaks the experience through screenshots, raw HTML files, collapsed documents, public URLs, or infrastructure-heavy deployment. display.dev fixes this by letting users publish any HTML or Markdown artifact behind company auth with one command, one sentence inside an agent workflow, or a simple web upload. Viewers open a permanent URL, sign in with their Google or Microsoft work account or a one-time password, and see the artifact exactly as built. It works with Claude Code, Codex, Cursor, Claude Desktop, shell scripts, and anything that produces HTML or Markdown.Starting Price: $15 per month -
37
Scribe Security Trust Hub
Scribe Security
Scribe is a SaaS solution that provides continuous assurance for the security and trustworthiness of software artifacts, acting as a trust hub between software producers and consumers. Scribe centralized SBOM management system allows to effortlessly manage and share products SBOMs along with all their associated security aspects in a controlled and automated manner. SCRIBE KEY FEATURES: *Gain visibility and control the risk of all your products’ security aspects. *Trust but verify: streamline security guardrails to verify secure SDLC policy, based on trusted evidence. *Simplify secure SDLC processes, balancing responsibilities between dev and security teams. *Detect code tampering and software factory exploitations. *Enforce and demonstrate compliance with regulations and best practices. *Share SBOMs and security insights in a controlled manner with stakeholders.Starting Price: Free -
38
Buildstash
Buildstash
Buildstash is a powerful platform designed to organize, store, and distribute software builds and binaries with ease and security. It automates build archival through integrations with local and CI environments, eliminating the chaos of shared folder dumping. The platform supports multiple platforms including mobile, desktop, games, XR, and embedded systems, providing tailored workflows for diverse development teams. Buildstash links builds directly to repositories and issue trackers like Linear or Jira for full visibility and context. Secure sharing options include password-protected links, private portals, and public download pages. By centralizing build management and release workflows, Buildstash helps teams collaborate more effectively and maintain control over their software delivery.Starting Price: $49/workspace/month -
39
Reforge
Reforge
Reforge artifacts allow you to access the real work from those who have done it before. Access the insights and story behind the artifact with notes from the creator. Bookmark artifacts for later or as a reminder to spread knowledge with your team. Empower your team with on-demand access to in-depth courses, templates, and case studies crafted by top tech operators. Craft personalized learning paths for your team's goals with Collections; ideal for onboarding plans, new manager training, and beyond. Enhance team collaboration with features like blank templates, highlight and tagging functions, and step-by-step guides tailored to address specific challenges.Starting Price: $1,995 per year -
40
CodeSentry
CodeSecure
CodeSentry is a Binary Composition Analysis (BCA) tool designed to provide detailed insights into the components of binaries, including open-source software, firmware, and containers. It helps identify vulnerabilities within these components by generating Software Bill of Materials (SBOMs) in formats like SPDX and CycloneDX. By mapping components to a comprehensive vulnerability database, CodeSentry enables organizations to mitigate risks and improve software security. It is effective for both pre-production analysis and post-production monitoring, allowing teams to track vulnerabilities throughout the software lifecycle. The tool is flexible in deployment, supporting SaaS and on-premise configurations. -
41
Instill Core
Instill AI
Instill Core is an all-in-one AI infrastructure tool for data, model, and pipeline orchestration, streamlining the creation of AI-first applications. Access is easy via Instill Cloud or by self-hosting from the instill-core GitHub repository. Instill Core includes: Instill VDP: The Versatile Data Pipeline (VDP), designed for unstructured data ETL challenges, providing robust pipeline orchestration. Instill Model: An MLOps/LLMOps platform that ensures seamless model serving, fine-tuning, and monitoring for optimal performance with unstructured data ETL. Instill Artifact: Facilitates data orchestration for unified unstructured data representation. Instill Core simplifies the development and management of sophisticated AI workflows, making it indispensable for developers and data scientists leveraging AI technologies.Starting Price: $19/month/user -
42
Bionic
Bionic
Bionic uses an agentless approach to collect all of your application artifacts and provides a deeper level of application visibility that your CSPM tool cannot. Bionic continuously collects your application artifacts and creates an inventory of all of your applications, services, message brokers, and databases. Bionic integrates as a step in CI/CD pipelines and detects critical risks in the application layer and code, so teams can validate security posture in production. Bionic analyzes your code, performing checks for critical CVEs, and provides deeper insights into the blast radius of potential attacks surfaces. Bionic prioritizes code vulnerabilities based on the context of the overall application architecture. Create customized policies to prioritize architecture risk based on your company's security standards. -
43
Kusari
Kusari
Kusari’s platform offers "always-on transparency” for the visibility and insights you need. Secure your software development lifecycle end-to-end, powered by open source GUAC and open standards. Understand the composition of any software artifact with GUAC, a queryable open-source knowledge graph. Evaluate artifacts before you ingest them, and create policies to automatically prevent risky or vulnerable dependencies from entering your supply chain. Make your development process secure by default without interrupting developer workflows. Kusari meets you where you are by integrating with your existing IDE and CI/CD tools. Put software supply chain security best practices on autopilot, ensuring the integrity of each build and generating the metadata to prove it. -
44
NuGet
NuGet
NuGet is the package manager for .NET. The NuGet client tools provide the ability to produce and consume packages. The NuGet Gallery is the central package repository used by all package authors and consumers. New to NuGet? Start with a walkthrough showing how NuGet powers your .NET development. Browse the thousands of packages that developers like you have created and shared with the .NET community. Want to make your first NuGet package and share it with the community? Start with our walkthrough! The command-line tool, nuget.exe, builds and runs under Mono 3.2+ and can create packages in Mono. Although nuget.exe works fully on Windows, there are known issues with Linux and OS X. The primary source for learning about a package is its listing page on NuGet (or another private feed). Each package page on NuGet includes a description of the package, its version history, and usage statistics.Starting Price: Free -
45
AWS Artifact
Amazon
AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS’ security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA). Perform due-diligence of AWS with enhanced transparency into our security control environment. Continuously monitor the security and compliance of AWS with immediate access to new reports. Review, accept, and manage your agreements with AWS. Apply your AWS agreements to all current and future accounts within your organization. -
46
Artifact
Nokto
Artifact uses AI to learn your interests and keep you up-to-date with the information and inspiration that matters most to you. Start discovering the most interesting articles and content shared from our community. Search and follow anyone with a social profile. Profiles feature recent links posted so it’s easy to see what someone is sharing. Links provide tools to help you quickly edit images and help with caption writing, any story that you find on Artifact can be summarized with AI. Artifact goes beyond traditional news categories, allowing you to share and explore links from across the web, from product pages, app reviews, recipes, architecture galleries, and more. Gain quick insights with a single tap as AI generates concise summaries for any article.Starting Price: Free -
47
PowerShellGet
Microsoft
PowerShellGet is a module with commands for discovering, installing, updating, and publishing PowerShell artifacts like modules, DSC resources, role capabilities, and scripts. The Find-Command cmdlet finds PowerShell commands such as cmdlets, aliases, functions, and workflows. Find-Command searches modules in registered repositories. For each command found by Find-Command, a PSGetCommandInfo object is returned. The PSGetCommandInfo object can be sent down the pipeline to the Install-Module cmdlet. Install-Module installs the module that contains the command. DSC resources can be located using the parameters Tag and RequiredVersion. Tag displays the current version of every resource that contains the specified tag in the repository. RequiredVersion needs the ModuleName parameter and the Name parameter is optional. The Name and ModuleName parameters limit the output. Use the AllVersions parameter to display a DSC resource's available versions.Starting Price: Free -
48
Magnet AXIOM
Magnet Forensics
Recover & analyze your evidence in one case. Examine digital evidence from mobile, cloud, computer, and vehicle sources, alongside third-party extractions all in one case file. Use powerful and intuitive analytical tools to automatically surface case-relevant evidence quickly. Recover, analyze, and report on data from mobile, computer, cloud, and vehicle sources in one case file with Magnet Axiom. Easily recover deleted data and analyze digital evidence from mobile, computer, cloud, and vehicle sources in one case file, with an artifact-first approach. Discover the full history of a file or artifact to build your case and prove intent. Magnet Axiom provides the most up-to-date artifact support for the most recent devices and sources. Acquire and analyze mobile, cloud, and computer evidence together in one case. Process warrant returns from providers such as Google, Facebook, and Instagram. -
49
Spectral
Check Point
Spectral is a lightning-fast, developer-first cybersecurity solution that acts as a control-plane over source code and other developer assets. It finds and protects against harmful security errors in code, configurations and other artifacts. Spectral employs the first hybrid scanning engine, combining AI and hundreds of detectors, ensuring developers can code with confidence while protecting companies from high-cost mistakes. Map and monitor hidden sensitive assets such as codebases, logs, and other sensitive intellectual property that belong to your organization, but were left exposed in public facing repositories. Leverage SpectralOps’ advanced AI backed technology with over 2000 detectors to get extensive coverage, detect issues and keep your organization safe. -
50
Chocolatey
Chocolatey
Chocolatey has the largest online registry of Windows packages. Chocolatey packages encapsulate everything required to manage a particular piece of software into one deployment artifact by wrapping installers, executables, zips, and/or scripts into a compiled package file. Package submissions go through a rigorous moderation review process, including automatic virus scanning. The community repository has a strict policy on malicious and pirated software. Many organizations face the ongoing challenge of deploying and supporting various versions of software. Chocolatey allows organizations to automate and simplify the management of their complex Windows environments. Our customers have experienced a massive reduction in effort, improved speed of deployment, high reliability, and comprehensive reporting. Reduce complexity, save yourself time, and get up to speed on the latest technologies and approaches.Starting Price: $96 per year
