Automated Testing, Software Composition Analysis & SBOM Tools

Joe Abajian, Analyst, Dan Mandell, Director, with Chris Rommel, EVP, November 2025

AI-generated code is accelerating modern software development, increasing the need for advanced automated testing, software composition analysis (SCA), and SBOM tools. Engineering teams are relying on static analysis, dynamic and model-based testing, and SCA solutions to manage security risks, validate open-source and AI-generated components, and meet tightening regulatory requirements such as the EU Cyber Resilience Act.

This report provides market sizing and forecasts across static analysis, dynamic and model-based testing, and SCA, segmented by region, vertical, and enterprise versus embedded use. It also includes end-user insights and a competitive assessment of leading vendors.

Key Vendors Profiled:

AdaCore, ANSYS, Battery Ventures, Black Duck Software, Checkmarx, Cursor, DeepCode AI, DXC Technology, Eggplant, ESI Group, Finite State, GitHub, GitLab, Google, Hugging Face, IBM, JFrog, Keysight, LDRA, MathWorks, Mend, MergeBase, Microsoft, NVIDIA, OpenText, Parasoft, Perforce, Phylum, QA Systems, Snyk, Sonatype, Tasking, TrustInSoft, Veracode, Windsurf, and more.