Audience
Businesses searching for an open source compliance solution that detects and identifies open source and third-party components in their codebase and their corresponding licenses and security risks.
About FossID
Software Composition Analysis (SCA)
FossID Workbench enables precise identification of open source components and vulnerabilities. It integrates into software development cycles, providing license recognition, proactive security checks, and detailed compliance reporting. FossID Workbench is available across various industries and helps to ensure that organizations can confidently meet their legal, security, and operational needs in open source software management.
Comprehensive Scanning
Creates a thorough and complete software bill of materials (SBOM) that catalogs all open source in use, regardless of how it made its way into the codebase.
Detailed Reporting
Ensures distribution compliance by generating reports, notices files, and copyright statements.
Integration & Extensibility
Features custom workflows, performing administrative tasks, generating reports, and more with the API.
Other Popular Alternatives & Related Software
Kiuwan Code Security
Kiuwan is an end-to-end application security platform that integrates seamlessly into your development process.
Our toolset includes Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Governance and Code Quality, empowering your team to quickly identify and remediate vulnerabilities.
Integrating into your CI/CD pipeline, Kiuwan enables early detection and remediation of security issues. Kiuwan supports strict compliance with industry standards including OWASP, CWE, MISRA, NIST, PCI DSS, and CERT, among others.
✅ Large language support: 30+ programming languages.
✅ Detailed action plans: Prioritize remediation with tailored action plans.
✅ Code Security: Seamless Static Application Security Testing (SAST) integration.
✅ Insights: On-demand or continuous scanning Software Composition Analysis (SCA) to help reduce third-party threats.
✅ One-click Software Bill of Materials (SBOM) generation
Code Smarter. Secure Faster. Ship Sooner.
Learn more about Kiuwan Code Security
Revenera SCA
Take control of your open source software management.
Empower your organization to manage open source software (OSS) and third-party components. FlexNet Code Insight helps development, legal and security teams to reduce open source security risk and manage license compliance with an end-to-end system.
FlexNet Code Insight is a single integrated solution for open source license compliance and security. Find vulnerabilities and remediate associated risk while you build your products and during their entire lifecycle. Manage open source license compliance, add automation to your processes, and implement a formal OSS strategy that balances business benefits and risk management. Integrate with build tools, CI/CD and SCM tools, artifact repositories, external repositories or build your own integrations using the FlexNet Code Insight REST API framework to make code scanning easy and effective.
Learn more about Revenera SCA
ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with advanced program analysis to find and automatically fix vulnerabilities.
ZeroPath provides complete security coverage:
1. AI-powered SAST for business logic flaws & broken authentication
2. SCA with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code
5. Automated patch generation.
any more...
ZeroPath delivers 2x more real vulnerabilities with 75% fewer false positives.
Our research team has been successful in finding vulns like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more about ZeroPath
Mend.io
Mend.io offers the first AI native application security platform, empowering organizations to build and run a proactive AppSec program tuned for AI powered development. The unified platform secures AI generated code and embedded AI components, drives risk reduction through AI powered remediation, automates compliance, and provides a holistic enterprise scale view of risks and clear actions for developers across your entire codebase.
Learn more about Mend.io
Pricing
Pricing Details:
Quoted based on number of contributors, deployment type, add-ons and services selected
Company Information
FossID
Founded: 2016
Sweden
fossid.com
Videos and Screen Captures
Other Useful Business Software
Host LLMs in Production With On-Demand GPUs
Deploy your model, get an endpoint, pay only for compute time. No GPU provisioning or infrastructure management required.
Product Details
Platforms Supported
Cloud
Linux
On-Premises
Training
Documentation
Live Online
Webinars
Support
Online
FossID Frequently Asked Questions
Q: What kinds of users and organization types does FossID work with?
FossID works with these users and organization types: Mid Size Business, Enterprise, Nonprofit, and Government.
Q: What languages does FossID support in their product?
FossID supports these languages: English and Japanese.
Q: What kind of support options does FossID offer?
FossID offers support via online.
Q: What other applications or services does FossID integrate with?
FossID integrates with: Jira, Snyk, and Stack Overflow Talent.
Q: Does FossID have an API?
Yes, FossID has an API.
Q: What type of training does FossID provide?
FossID provides training in the form of documentation, live online, and webinars.
Q: What pricing for support is available for FossID?
FossID offers support included with purchase.
Q: What pricing for training is available for FossID?
FossID offers training included with purchase.
