FOSSA
Control your software supply chain
FOSSA is an open source management platform that scans packages, containers, SBOMs, binaries, and snippets to identify third-party dependencies across the software development lifecycle. It addresses license compliance, security vulnerability management, dependency updates, and SBOM reporting, with automated policy enforcement and guided remediation for license issues, critical vulnerabilities, and end-of-life components.
Core capabilities include automated license and vulnerability scanning, SBOM generation and ingestion, multi-project reporting, API access, and CI/CD integration. The fossabot AI agent analyzes dependency update pull requests, detects code impact, bundles related updates, and can adapt code to reduce breaking changes, working alongside tools such as Dependabot, Renovate, and Snyk. Snippet and binary scanning are available as add-ons.
FOSSA is packaged as a free plan for individuals and small teams with project and developer limits, a per-project Business plan with a free trial, and a custom Enterprise plan featuring SSO, RBAC, custom deployment, and enterprise SLAs. Pricing is based primarily on contributing developers.
12 alternatives to FOSSA
Ranked by how well each tool replaces FOSSA: shared features, audience, price and popularity.
Open-source tools for system security and standards compliance
Covers 0 of 15 key features and is open source.
Free planOpen source58 out of 100 matchFreeCompliance Solutions for Websites, Apps and Organizations
Covers 1 of 15 key features and starts cheaper.
Free plan57 out of 100 match$5.99/moAutomated compliance and trust platform covering SOC 2, HIPAA, ISO 27001, PCI, GDPR, and 3
Covers 6 of 15 key features.
57 out of 100 matchContact sales- 57 out of 100 match—
Check if your email has been exposed in a data breach.
Covers 1 of 15 key features and starts cheaper.
Free plan57 out of 100 match$4.39/moContractor and supplier risk, compliance and safety readiness platform
Covers 9 of 15 key features.
56 out of 100 matchContact salesThe intelligent compliance backbone for your business
Covers 5 of 15 key features and starts cheaper.
Free plan56 out of 100 match$10/mo- 55 out of 100 matchContact sales
Automated website security and privacy compliance platform covering PCI DSS 4.0.1, HIPAA,
Covers 2 of 15 key features.
55 out of 100 matchContact sales- 55 out of 100 match$7.40/mo
Know exactly what's in your software.
Covers 0 of 15 key features and is open source.
Free planOpen source55 out of 100 matchFree- 55 out of 100 matchContact sales