FOSSA
6.4#5 in open source license compliance softwareFree planFree planWebAPILinuxSelf-hosted
VisitFOSSA vs ScanCode.io
ScanCode.io
7.0#3 in open source license compliance softwareFree planFree planWebAPILinuxmacOS
VisitWhat both publish
| Fact | FOSSA | ScanCode.io |
|---|---|---|
| Deployment | FOSSA documents an on-premises deployment that customers can operate in their own infrastructure using Kubernetes and Helm. | ScanCode.io can run in a Docker container or be installed on a Linux server. |
| Founded | 2015 | 2014 |
| Headquarters | San Francisco, California, United States | Brussels, Belgium |
| Purpose | FOSSA scans software to identify dependencies, vulnerabilities, and license issues across the software development lifecycle. | ScanCode.io provides a Web UI and API for running and reviewing complex software composition analysis scans in scripted pipelines. |
| SBOMs | FOSSA supports generating, importing, exporting, and managing SBOMs; the pricing page lists a limit of five imported SBOMs on Free. | It supports generating and consuming CycloneDX and SPDX SBOMs. |
| Support | The Free plan includes basic email support, while Business includes priority support. | The documentation directs users to file documentation issues for missing or confusing content. |
FOSSA plans
- FreeFree
- Business—
- EnterprisePriced on request
ScanCode.io plans
- ScanCode.io (Apache-2.0 software)Free
Pick FOSSA if…
FOSSA suits developers, security teams, and legal counsel that need to track software dependencies, vulnerabilities, licenses, or SBOMs. Its on-premises option is for organizations that want to operate the deployment in their own infrastructure.
Pick ScanCode.io if…
ScanCode.io suits teams automating software composition analysis in CI/CD pipelines or reviewing software packages and containers. It is a fit for users able to run Docker or install it on a Linux server, including those who need an offline deployment.