FOSSA

Control Your Software Supply Chain

FOSSA is a software supply chain management platform that provides automated SBOM generation, software composition analysis (SCA), open source license compliance, vulnerability management, and dependency health monitoring. It scans packages, containers, SBOMs, binaries, and code snippets, enforces compliance policies, and generates attribution notices and compliance reports. Includes a CLI, REST API, CI/CD integrations, and fossabot for automated PR comments and issue triage.

Category: Security
Pricing: freemium
Free tier: yes
API: yes
MCP server: no
SDK: yes
Open source: no

#sca #sbom #license-compliance #vulnerability-management #software-supply-chain #open-source

Alternatives to FOSSA →

Listed 2026-10-24 · last verified 2026-10-24 · extracted by @cf/zai-org/glm-5.3-flash · confidence 0.95

Your product? Claim this listing · Report a problem · Badge

API

curl https://toolgrep.com/api/products/fossa