FOSSA is described as 'Offers automated license scanning, dependency analysis and reports at each commit. Get a process up an running in 60 seconds, without slowing down development' and is a vulnerability scanner in the security & privacy category. There are more than 25 alternatives to FOSSA, not only websites but also apps for a variety of platforms, including Linux, Windows, Mac and Self-Hosted apps. The best FOSSA alternative is HarborGuard. It's not free, so if you're looking for a free alternative, you could try HarborGuard or Mend Renovate. Other great sites and apps similar to FOSSA are spdx-tool, ScanCode, Mend Bolt and Black Duck Software.
Modern cloud-based software licensing solution with advanced features, designed for software vendors selling web, desktop & mobile applications. No license keys. No license servers. Drive revenue, protect IP, reduce license admin costs by up to 70%.
NetLicensing is a first-class solution in the Licensing as a Service (LaaS) sector. Based on open standards, it provides a cost effective, integrated and scalable license management solution for software vendors and developers who want to concentrate on their product's core...
ReARM is an abbreviation for "Reliza's Artifact and Release Management". It is a Release Governance Platform to manage lifecycle for product and component releases and organize release metadata, including SBOMs, xBOMs, other security artifacts, vulnerability...
Mend.io offers the first AI native application security platform, purpose-built to secure AI-generated code and embedded AI components. Our unified platform enables companies to manage application risk effectively in modern software development.
Leader in cloud-based enterprise-class software licensing. Easily migrate from Flexera, Safenet/Gemalto, etc. All license models, dynamic entitlements, online/offline support, easy integration with back-office, Win/Linux/Mac/Android/ARM.
PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.
sbomify is the trust center for your software supply chain. Store every SBOM and compliance document in one place, track them across products and releases, and share them with customers and regulators on demand. CycloneDX and SPDX, built for EU CRA compliance.
Dependency Track SaaS provided by YourSky.blue is the managed cloud solution of the popular open-source Dependency-Track. Always up to date with the latest security bulletins, it allows to easily monitor all the chain of software components through powerful dashboards and...
Timesys Vigiles is a Software Composition Analysis (SCA) tool that helps generate and analyze a Software Bill of Materials (SBOM) for publicly known cybersecurity vulnerabilities, particularly CVEs. Vigiles is optimized for embedded systems, and it provides a complete...
FlexNet Code Aware is a free code scanner that scans Java, NuGet and NPM packages looking for license compliance, IP, and security vulnerability risks.
Palamida Standard Edition contains the scanning and analysis features, without the request and authorization workflow. It is designed for organizations who need to focus first on analysis of code content, perhaps as a result of an immediate requirement for disclosures (Third...
United Kingdom
Austria
EU
Canada
Israel
United States
Switzerland
