FOSSA

FOSSA is a software supply chain security platform that automates SBOM generation, software composition analysis, open source license compliance, and vulnerability management. It solves the problem of identifying and managing security, license, and code quality risks in modern software development. The platform sells to enterprises and smaller teams, targeting developers, IT, security, and legal roles. It is delivered as a SaaS platform with an open-source component, offering a free tier and enterprise pricing.

Key features

• Automated SBOM generation
• Software composition analysis (SCA)
• Open source license compliance
• Vulnerability management
• SBOM policy enforcement
• Snippet scanning
• Binary scanning
• Container scanning
• AI coding guardrails
• Supplier risk management