FOSSA
Control your software supply chain
Ranked #8 in Best software composition analysis tools.
FOSSA is a software supply chain management platform. It automates license compliance, security scanning, and SBOM generation.
At a glance
| Best for | engineering teams managing open source dependencies |
From FOSSA's own website.
Company facts
| Social profiles | LinkedIn, X, GitHub |
Facilities and features
Its website also mentions:
- Published pricing
- Free trial
- SOC 2
What stands out
The product automates license compliance and security scanning.
“Automate and accelerate license compliance, security, and SBOM management for all third-party code”FOSSA, own website
The product generates SBOMs for regulatory compliance.
“Generate and manage SBOMs for regulatory compliance”FOSSA, own website
How it ranks
FOSSA is ranked 8th of 10 in Best software composition analysis tools (Lister Score 88.0).
#8 in Best software composition analysis tools · Lister Score 88.0
Generates SBOMs for regulatory compliance.
How the score is made up: fit to this ranking's criteria 40; evidence on its own site 20; how complete its published information is 16; buying information on its own site 12.
“CycloneDX Cyber Resilience Act Open Source Licenses SBOM Compliance Requirements SBOMs Software Composition Analysis Software Supply Chain Security SPDX”FOSSA, own website
| Rank | Best software composition analysis tools | Score |
|---|---|---|
| 1 | Cloudsmith | 96.0 |
| 2 | Checkmarx | 94.0 |
| 3 | Mend.io | 94.0 |
| 4 | Snyk | 94.0 |
| 5 | Socket | 92.0 |
| 6 | Dependency-Track | 90.0 |
| 7 | Endor Labs | 90.0 |
| 8 | FOSSA | 88.0 |
| 9 | Legit Security | 88.0 |
| 10 | Veracode | 88.0 |
Frequently asked questions
How does FOSSA rank on Lister?
FOSSA is ranked 8th of 10 in Best software composition analysis tools (Lister Score 88.0).