FOSSA
6.9#8 in software composition analysis softwareFrom $168,392.50 a monthFree planWebAPILinuxSelf-hosted
VisitFOSSA vs sbomasm
What both publish
| Fact | FOSSA | sbomasm |
|---|---|---|
| Purpose | FOSSA scans software to identify dependencies, vulnerabilities, and license issues across the software development lifecycle. | sbomasm is a toolkit for managing SBOMs across their lifecycle, including assembly, metadata editing, sensitive-data removal, enrichment, signing, and verification. |
| Support | The Free plan includes basic email support, while Business includes priority support. | The README lists Slack, live chat, email and GitHub bug reports as ways to contact the project team. |
FOSSA plans
- FreeFree
- Business$2,020,710 a year
- EnterprisePriced on request
sbomasm plans
No prices published.
Pick FOSSA if…
FOSSA suits developers, security teams, and legal counsel that need to track software dependencies, vulnerabilities, licenses, or SBOMs. Its on-premises option is for organizations that want to operate the deployment in their own infrastructure.
Pick sbomasm if…
sbomasm suits teams and developers who need to assemble, clean up, enrich or verify SBOMs in Linux or macOS workflows. It is also relevant to users integrating SBOM handling with Dependency-Track or CI systems.