# OWASP Dependency-Track: how AI models rank it, September 2026

IT AI Recommendation Index, September 2026 Edition. Named in 11 judge labels across 1 categories by 10 of 12 models. Page: https://it-ai-index.com/vendors/owasp-dependency-track/

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| Software composition analysis | 2% | 6 | 0% | 11 |

## What the models said for it

- "start with Trivy or OWASP Dependency-Track for full-featured, free SCA" (Mistral Small, SCA)
- "optionally paired with OWASP Dependency-Track for centralized tracking" (DeepSeek V4 Flash, SCA)
- "better if you want a centralized vulnerability management platform" (GPT-5.4 mini, SCA)
- "For portfolio monitoring, pair with OWASP Dependency-Track (free OSS)." (Grok 4.1 Fast, SCA)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.