FOSSA

Open source license compliance platform with SBOM generation and management.

Pricing: free, subscription, custom
Free tier: true
Open source: No

Editorial review

FOSSA has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://docs.fossa.com/Verified
Tags(open-source;cloud-native): SBOM, license compliance, SCA, supply chain security, open source managementVerified

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): SaaSVerified

Pricing · Licensing

Free plan(true/false): trueVerification pending
Free trial(true/false): trueVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): free, subscription, customVerification pending
Starting price(29): 20Verified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Open source license compliance and IP risk reduction, Unified vulnerability management across the SDLC, SBOM generation and management for regulatory compliance, Scanning of packages, containers, binaries and code snippets, Automated policy enforcement with guided remediation, License attribution notice generation in secondsVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending

Security · Privacy · Compliance

Security certifications(SOC 2 Type II;ISO 27001): SOC 2Verified

Support · Docs · Services

Support channels(email;ticket;chat;phone;community): email, priority supportVerified

Audience · Use · Case

Best for(Neutral editorial summary): Engineering and legal teams automating license compliance, vulnerability management and SBOM reporting across the SDLC.Verification pending
Company-size fit(individual;SMB;mid-market;enterprise): individual, SMB, mid-market, enterpriseVerification pending
Primary use cases(build;monitor;automate): OSS license compliance, Software composition analysis (SCA), SBOM management for regulatory reporting, Outdated dependency managementVerification pending

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.