There are several differences, but perhaps the biggest is that SCA solutions are designed to analyze and identify potential issues in open source software components. In contrast, tools like DAST (Dynamic Application Security Testing), SAST (Static Application Security Testing), and IAST (Interactive Application Security Testing) analyze proprietary code (and also tend to be used a little bit later in the software development lifecycle). It is common, however, for organizations to implement both SCA and one or more proprietary code testing solutions.