← All tools

OWASP Dependency-Check

SCA · Intermediate

Identify known vulnerable dependencies.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • CVE matching
  • Reports

Legitimate use

SCA for legacy stacks.

Official docs →

Example commands (lab VMs only)

  • dependency-check --project lab --scan ./
    Scan a Maven/Node project