4
SourceTrust
SourceTrust helps teams review third-party software licenses and publish a shareable compliance page for products they ship.
Free planWeb
6.7From $299 a year
Visit
5
FOSSA
FOSSA scans software to identify dependencies, vulnerabilities, and license issues across the development lifecycle.
Free planWebAPILinuxSelf-hosted
6.4Free plan
Visit
6
DejaCode
DejaCode is an enterprise application for managing open-source license compliance and software supply-chain integrity.
WebAPILinuxSelf-hosted
6.3From $500 a month
Visit
7
FossID Workbench
FossID Workbench is a software composition analysis tool for identifying and governing third-party components, licenses, and vulnerabilities in codebases.
WebAPILinuxSelf-hosted
6.2
Visit
8
OSS Review Toolkit
OSS Review Toolkit (ORT) is a free, open-source toolkit for managing software dependencies and automating FOSS policy checks.
Free planLinuxmacOSSelf-hostedWindows
6.2Free plan
Visit
9
ScanCode Toolkit
ScanCode Toolkit is a free software tool for examining codebases for code origin, copyrights, licenses, vulnerabilities, packages, and dependencies.
Free planAPILinuxmacOSSelf-hosted
6.2Free plan
Visit
10
Double Open Compliance
Free planWebAPISelf-hosted
6.1Free plan
Visit
11
licscan
LicScan is a command-line tool for checking project dependencies for license risk and producing software bills of materials (SBOMs) and EU CRA evidence.
Free planLinuxmacOSWindows
6.1Free plan
Visit
12
OHRisk
OHRisk is a free local command-line tool for assessing open-source license risk in software dependencies before changes reach a pull request.
Free planLinuxmacOSWindows
6.1Free plan
Visit
13
OSSKB
OSSKB identifies open source software in source code, including at snippet level, and provides information relevant to license compliance.
Free planWebAPILinuxmacOS
6.1Free plan
Visit
14
SBOM Workbench
SBOM Workbench is a graphical tool for scanning and auditing source code with the SCANOSS API.
Free planLinuxmacOSWindows
6.1Free plan
Visit
15
Apache RAT
Apache RAT is a free release-audit tool for checking software distributions, with particular attention to license headers.
Free planLinuxSelf-hosted
6.0Free plan
Visit
16
Licensable
Licensable is a web service that provides open-source license insights and compliance reports for GitHub repositories.
Free planWeb
6.0Free plan
Visit
17
license-comply
license-comply is a free, self-hosted scanner for open-source licenses in Python project dependencies.
Free planSelf-hosted
6.0Free plan
Visit
18
REUSE Tool
REUSE Tool helps software projects make Free Software licensing information clear and machine-readable.
Free planAPILinuxSelf-hostedWindows
6.0Free plan
Visit
19
ScanCode Workbench
ScanCode Workbench is a free desktop application for inspecting and analyzing ScanCode Toolkit scans of a codebase.
Free planLinuxmacOSWindows
6.0Free plan
Visit
20
ClearlyDefined
ClearlyDefined is an open source project that collects and improves licensing, security, and other information about free and open source software.
Free planWebAPISelf-hosted
5.9Free plan
Visit
21
FOSSLight Hub
FOSSLight Hub is a free, open-source tool for managing software components, licenses, vulnerabilities, SBOMs, and compliance work.
Free planWebAPISelf-hosted
5.9Free plan
Visit
22
Licensed
Licensed is a free Ruby gem for recording dependency license metadata and checking it against project policy.
Free planLinuxmacOS
5.9Free plan
Visit
23
Check License Compliance
Check License Compliance is a free, Apache-2.0-licensed open-source GitHub Action for checking repository dependencies against license policies.
Free planLinuxSelf-hosted
5.7Free plan
Visit
24
LicenseRec
WebLinuxSelf-hosted
5.6
Visit
25
OpossumUI
OpossumUI is a free desktop application for exploring open-source components, reviewing licenses, and producing reports from code scans.
LinuxmacOSWindows
5.6
Visit
26
OSCake
5.3
Visit
27
SkyWalking Eyes
LinuxmacOSWindows
4.7
Visit

Back to SW360