FOSSA

7.7easy start · #3 of 65
in Software Composition Analysis Software

Free to practise onyes
Free trialyes
Well documentedyes
Runs where you worknot on record

Runs on api, Linux, self-hosted, Web. Paid plans from $168392.50/mo.

FOSSA is ranked #3 of 65 in software composition analysis software on The Geeks Club. It runs on API, Linux, Self-hosted, Web. There is a free plan. A free trial is offered. Paid plans start at $168392.50/mo.

FOSSA plans and pricing

All plans

Free Free Free forever 5 projects · 10 contributing developers · 1 release group · 5 dependency levels for scans · 1 quality check · 5 imported SBOMs fossa.com · 2 Oct 2026

Business $2,020,710/yr Billed annually 10 projects / SBOM imports · 10 contributing developers · 1 release group · Unlimited dependency levels · Full suite of quality checks fossa.com · 2 Oct 2026

Enterprise Not published Custom Unlimited projects · Custom developer count · Unlimited release groups and dependency levels · Enterprise SLAs · Custom retention policies fossa.com · 2 Oct 2026

Compared on software composition analysis software

Free plan: Yes
Paid from: $20/mo

Best FOSSA alternatives

See all 12

Sonatype Nexus Repository 0 of 4 in the starter kit Lesson 18.0 Xygeni 0 of 4 in the starter kit Lesson 27.9 Snyk Open Source 0 of 4 in the starter kit Lesson 47.4 Docker Desktop 0 of 4 in the starter kit Lesson 57.3 Socket 0 of 4 in the starter kit Lesson 67.3 Semgrep Supply Chain 0 of 4 in the starter kit Lesson 77.2

The record

Purpose: FOSSA scans software to identify dependencies, vulnerabilities, and license issues across the software development lifecycle.
Dependency scanning: FOSSA advertises open source dependency analysis for more than 30 languages.
Policy enforcement: Its policy engine supports organization-wide license, security, and quality standards, including build-blocking enforcement.
SBOMs: FOSSA supports generating, importing, exporting, and managing SBOMs; the pricing page lists a limit of five imported SBOMs on Free.
Scanning methods: FOSSA supports CLI and CI/CD scanning, container analysis, snippet detection, Quick Import from code hosts, and enterprise binary and SBOM uploads.
Import limitation: FOSSA says Quick Import scans source without running the build and produces less complete results than a CLI scan.
Integrations: Documented integrations include Jira, GitHub, Slack, Bitbucket, GitLab, APIs, and OIDC providers.
Security: FOSSA's Trust Center lists SOC 2 compliance and controls including data encryption and penetration testing.
Deployment: FOSSA documents an on-premises deployment that customers can operate in their own infrastructure using Kubernetes and Helm.
Support: The Free plan includes basic email support, while Business includes priority support.
Intended users: FOSSA describes its documentation as serving developers, security teams, and legal counsel.
Company history: FOSSA says organizations have used its software since 2015.
Founded: 2015
Headquarters: San Francisco, California, United States
Price from: $168392.50/mo

Where it ranks on The Geeks Club

Best Software Composition Analysis Software in 2026#3 of 65
Best Open Source License Compliance Software in 2026#1 of 28
Best Dependency Management Software in 2026#4 of 25
Best SBOM Management Software in 2026#4 of 22

Is FOSSA yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote FOSSA

Sources

fossa.com/products/scan/· checked 2 Oct 2026
fossa.com/pricing/· checked 2 Oct 2026
docs.fossa.com/docs/project-setup· checked 2 Oct 2026
docs.fossa.com/docs/organization-management/organizati· checked 2 Oct 2026
fossa.com/trust/· checked 2 Oct 2026
docs.fossa.com· checked 2 Oct 2026
fossa.com/about/· checked 2 Oct 2026
fossa.com· checked 23 Sept 2026