Deploy Dependency-Track with one-click installation.
Open-source component analysis platform that continuously monitors software bills of materials for vulnerabilities, outdated components, and license risk.
What you can build with Dependency-Track
Dependency-Track is an OWASP flagship project that gives security and engineering teams continuous visibility into software supply chain risk. It ingests Software Bill of Materials (SBOM) documents in CycloneDX format and analyzes every component against authoritative vulnerability sources including the National Vulnerability Database, GitHub Advisories, OSS Index, and VulnDB — so a single CVE disclosure surfaces immediately in every project that ships the affected library.
Self-hosting Dependency-Track keeps SBOMs and vulnerability findings about your proprietary applications entirely inside your infrastructure, which matters for organizations under regulatory or contractual constraints on where supply-chain telemetry can live. The PostgreSQL-backed deployment retains a complete audit trail of component inventories and policy decisions across every release.
Key features of Dependency-Track
SBOM ingestion
Accepts CycloneDX bills of materials directly from CI/CD pipelines, build tools, and SCA scanners — no agent install required on application hosts.
Multi-source vulnerability intel
Correlates every component against the NVD, GitHub Advisories, OSS Index, and VulnDB so newly disclosed CVEs surface across all affected projects immediately.
Policy engine
Define and enforce policies on vulnerability severity, license families, and component age, and fail CI builds when projects violate organizational standards.
License compliance
Identifies every license across the dependency graph and flags incompatible or restricted licenses before they ship into a release.
EPSS and exploit context
Prioritizes findings using the Exploit Prediction Scoring System and known-exploited indicators, focusing remediation effort on the vulnerabilities most likely to be attacked.
REST API and webhooks
Full REST API and outbound notifications to Slack, Microsoft Teams, Jira, and webhooks let you wire findings into existing ticketing and alerting workflows.
Why run Dependency-Track on Hostinger
Launch in one click
Get your application up and running instantly with a preconfigured setup. No manual installation or complex setup steps.
Security you can rely on
Keep your applications protected with a built-in firewall, DDoS protection, and continuous monitoring.
Built in Docker manager
Run and manage multiple Docker containers from one place. Deploy, update, and monitor your projects with ease.
Launch in one click
Get your application up and running instantly with a preconfigured setup. No manual installation or complex setup steps.
Security you can rely on
Keep your applications protected with a built-in firewall, DDoS protection, and continuous monitoring.
Built in Docker manager
Run and manage multiple Docker containers from one place. Deploy, update, and monitor your projects with ease.
Docker VPS hosting you can rely on
I'm incredibly happy with Hostinger's VPS hosting! Their uptime is consistently top-notch, keeping my site running smoothly. Whenever I've needed help, their technical support team has been quick, knowledgeable, and genuinely helpful.
Everything is smooth and great with Hostinger, the AI chat bot + human chat, if AI can't resolve your question. Oh and them VPS is just fire, no ups and downs. Thank you dev team and everyone else involved. Keep it up 🚀
Finally a VPS hosting company that does it right! Well-priced. Excellent portal that respects their users' time. Seamless backups. Good support. Reliable. Feels rock-solid.
I reached out to Hostinger support after losing access to my self-hosted n8n instance, and I couldn’t be more impressed. Hostinger Agent and Mohammad from the support team were incredibly patient and thorough.
Many thanks to Carla for helping me with this N8N upgrade on my Hostinger VPS. Professional and knowledgeable, thank you again Carla.
Hostinger VPS is absolutely outstanding. It just always works. It is always fast and stable. Never down, never crashes.
The company is doing well, I am very happy with the specific services I use through them. Not as expensive as some places with really great VPS set ups and price plans.