Anchore Enterprise
Anchore Enterprise: A broad container and SBOM security platform for teams managing complex software supply chains. Ranked #35 of 65 in Software Composition Analysis Software by our editors (5.6/10); pricing: Pricing on request; best for container security and SBOM operations.
At a glance
- Editor score5.6 / 10
- PricingPricing on request
- Best forContainer security and SBOM operations
- Free planNo
- SBOM generationYes
- Founded2016 · Santa Barbara, California, United States
- Facts checked22 Sep 2026
Where it wins
- Generates SBOMs from containers and filesystem artifacts
- Combines vulnerability, malware, secret, and misconfiguration scanning
- Supports policy gates, Kubernetes admission control, and runtime inventory
Where it doesn't
- No free plan is available
- Pricing requires contacting sales
- Does not provide verified reachability analysis
Our verdict on Anchore Enterprise
Anchore Enterprise is a software supply chain security platform for organizations securing container images, filesystems, source code repositories, build artifacts, mounted virtual machines, and externally supplied SBOMs. It generates and stores SBOMs, continuously reevaluates vulnerabilities, scans for malware, secrets, and misconfigurations, and applies policy-based controls. Its broad scope makes it suitable for enterprise teams coordinating security across development, CI/CD, and production environments.
The platform fits established engineering ecosystems through GitHub Actions, GitLab, Jenkins, Azure Pipelines, AWS CodeBuild, Kubernetes, Amazon ECS, and container registries. AnchoreCTL and REST and GraphQL APIs support pipeline integration and automation, while web, Linux, API, and self-hosted access provide deployment flexibility. SBOM import and export in SPDX, CycloneDX, and Syft formats helps teams work across tools and exchange inventory in common formats. Kubernetes admission control and runtime inventory extend coverage beyond image creation into deployment workflows.
Anchore Enterprise is organized around request-pricing tiers named Core, Enhanced, Pro, Advanced, Basic, Premium, and Ultimate, with no free plan. Its feature breadth suits organizations that need centralized SBOM operations, continuous vulnerability evaluation, configurable policy gates, and coverage across many package and artifact ecosystems. Teams seeking a narrowly focused scanner or a product with publicly stated monetary pricing may prefer another option. It is also a weaker fit for buyers who require verified reachability analysis. Choose Anchore Enterprise when container security, SBOM governance, and policy enforcement need to work together across hybrid environments.
Your product? Our editors can test Anchore Enterprise in depth and publish a review, labelled as paid · from $149/mo →
Anchore Enterprise pricing
All 7 Anchore Enterprise plans and prices →
Anchore Enterprise fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Supported ecosystems | RPM, DEB, APK, ALPM, Portage, Microsoft KB patches, C/C++, Dart, .NET, Elixir, Erlang, Go, Haskell, Java, JavaScript, Jenkins Plugins, Lua, Nix, Objective-C, OCaml, PHP, Python, R, Ruby, Rust, Swift, SWI-Prolog, Bitnami, GitHub Actions, Homebrew, Terraform, WordPress plugins |
| SBOM generation | Yes |
| Reachability analysis | Not verified |
| Pull request scanning | Not verified |
| Monitored projects | Not verified |
| Deployment options | Not verified |
| Deployment | Cloud, Self-hosted |
| Platforms | Web, Linux |
| Support | Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 4 integrations: CI/CD pipelines, container registries, Kubernetes, Amazon ECS |
| Pricing | Pricing on request (source) |
| Website | anchore.com |
| Facts checked | 22 Sep 2026 |
Anchore Enterprise integrations
Anchore Enterprise lists 4 integrations on its own site.
- CI/CD pipelines
- container registries
- Kubernetes
- Amazon ECS
Alternatives to Anchore Enterprise
- Snyk Open SourceBroad SCA coverage with reachability, SBOMs, pull-request scanning, and monitoring.9.4
- FOSSAA mature SCA platform covering dependencies, SBOMs, containers, licenses, and policy controls.9.3
- Safeguard SCAA budget-conscious SCA platform with reachability analysis, SBOMs, and remediation workflows.9.1
See all Anchore Enterprise alternatives →
Also Ranked In
Anchore Enterprise is ranked in 6 of our directories.
Used Anchore Enterprise? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Anchore Enterprise for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Anchore Enterprise is listed in our Software Composition Analysis Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/anchore-enterprise/"><img src="https://www.itechguides.com/best/badge/anchore-enterprise.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update