Free
Free
Pricing lists a Free plan forever with limits on projects, developers, and SBOM imports.
- Access
- Pricing lists a Free plan forever with limits on projects, developers, and SBOM imports.
FOSSA
● Identity checkedAssistant · Vendor site 2026-10-04
FOSSA is a software supply chain platform for SBOM generation, open-source license compliance, and vulnerability management. It scans dependencies, produces compliance reports, and scales from free developer limits to business and enterprise deployments.
- Category
- Assistant
- Free access
- Pricing lists a Free plan forever with limits on projects, developers, and SBOM imports.
- API access
- Free and Business tiers mention API access on the pricing comparison.
Is FOSSA right for you?
A good fit for
Engineering organizations that must track third-party code licenses and security across many repositories.
Before you choose
Business pricing is calculated per project and team size rather than a single flat monthly USD card price.
Supply chain visibility
FOSSA automates dependency inventory, compliance reporting, and vulnerability workflows for teams shipping software with heavy open-source usage.
What it can do
Features & capabilities
Unknown is different from unavailable. Each fact carries its own evidence.
| Capability | Value | Evidence | Checked |
|---|---|---|---|
| SBOM generation | Homepage meta highlights automated SBOM generation and software composition analysis. | Facts sourced | 2026-10-04 |
| License compliance | Marketing copy focuses on managing open-source licenses and policy violations. | Facts sourced | 2026-10-04 |
| Free tier limits | Pricing Free plan caps projects, contributing developers, and imported SBOMs for small teams. | Facts sourced | 2026-10-04 |
Understand the total cost
FOSSA pricing & plans
Alternatives to FOSSA
View all ↗
coveralls.ioCoveralls tracks test coverage history and statistics for software repositories, highlighting untested code so teams can ship with more confidence. It integrates with GitHub, Bitbucket, and GitLab, stays free for open-source repos, and sells paid cloud plans for private repositories and enterprise hosting.
Explore tool
GraphisGraphis is a creative whiteboard canvas that unifies image, video, and text generation across hundreds of third-party AI models. Users build multi-step workflows, customize model palettes per project, and manage LoRAs, plugins, and editing tools without leaving one board.
Explore tool
DomainCanaryDomainCanary helps organizations move DMARC policies toward enforcement without blocking their own mail. It offers hosted DMARC, staged policy changes with approval steps, and rollback if a step blocks legitimate senders, plus reporting tuned for MSPs and domain portfolios.
Explore toolThe practical questions
Frequently asked questions
What is FOSSA?
Pricing FAQ describes FOSSA as a platform that scans codebases for open-source dependencies to manage licenses, vulnerabilities, and quality checks.
What is FOSSA used for?
FOSSA is a software supply chain platform for SBOM generation, open-source license compliance, and vulnerability management. It scans dependencies, produces compliance reports, and scales from free developer limits to business and enterprise deployments.
Does FOSSA have a free plan?
Pricing lists a Free plan forever with limits on projects, developers, and SBOM imports.. This record lists ongoing free access; check the plan limits before starting.
How much does FOSSA cost?
No paid monthly price is listed; this record treats the product as free to start. See the plan cards for entitlements, billing commitments and seat minimums.
Can I use FOSSA through an API?
Free and Business tiers mention API access on the pricing comparison.. API access and subscription access may have different terms; consult the linked sources.
What should I check before choosing it?
Business pricing is calculated per project and team size rather than a single flat monthly USD card price.
Price history
No retained pricing changes yet. A current price alone does not establish a historical trend.
How this profile is supported
Identity and profile
Reviewed vendor source
Read original source ↗Facts apply to the named version and check date. Send a sourced correction if something changed.