Meterian

Meterian is a software composition analysis platform that scans codebases for open source vulnerabilities, outdated dependencies and licence compliance issues. It analyses manifest data without accessing proprietary source code, and integrates into CI/CD pipelines across a wide range of programming languages. Reports cover security, stability and licensing dimensions with scores, and include a Software Bill of Materials (SBOM) listing components, licences and copyright attributions. Reports are available in HTML, JSON, TXT and PDF formats depending on plan.

The platform includes the SCA Codebase Scanner and a container scanner, with integrations for GitHub Actions, Bitbucket Pipelines, Azure DevOps Pipelines and CI platforms. Additional products include an Infrastructure-as-Code scanner, Sentinel notification service, Data Feeds, and on-premises or dedicated instance installations, priced separately. Sentinel sends email or Slack alerts when a new known vulnerability affects a project. Licence Risk Analysis checks dependencies against administrator-defined policies, and CI thresholds can block builds when scores fall below set values. Basic and Full API access are available depending on plan.

Meterian is aimed at development, quality control and risk management teams. Plans include a Free tier for open source projects with limited closed source projects and daily analyses, a Bootstrap tier, a Professional tier adding PDF reports, native CI integration, full API access and licence inventory, and an Enterprise tier with higher limits, team management, licence risk analysis, SBOM compliance reporting, custom report formats and phone support. Accounts support members with Administrator, Collaborator and Viewer roles, with Teams available on Enterprise.