FOSSA
6.4#5 in open source license compliance softwareFree planFree planWebAPILinuxSelf-hosted
VisitFOSSA vs SourceTrust
SourceTrust
6.7#4 in open source license compliance softwareFrom $299 a yearFree planWeb
VisitWhat both publish
| Fact | FOSSA | SourceTrust |
|---|---|---|
| Founded | 2015 | 2026 |
| Headquarters | San Francisco, California, United States | Copenhagen, Denmark |
| Integrations | Documented integrations include Jira, GitHub, Slack, Bitbucket, GitLab, APIs, and OIDC providers. | The site lists GitHub, GitLab, and Azure DevOps repository connections, plus lockfile and SBOM imports. |
| Purpose | FOSSA scans software to identify dependencies, vulnerabilities, and license issues across the software development lifecycle. | SourceTrust helps teams review third-party software licenses and publish a shareable license compliance page for products they ship. |
| Support | The Free plan includes basic email support, while Business includes priority support. | SourceTrust offers a live walkthrough and lists [email protected] for platform questions. |
FOSSA plans
- FreeFree
- Business—
- EnterprisePriced on request
SourceTrust plans
- Open sourceFree
- Per project — monthly$29 a month
- Per project — yearly$299 a year
- Extra watched branch$550 a month
- Custom domain$49,499 a month
- Security monitoring—
Pick FOSSA if…
FOSSA suits developers, security teams, and legal counsel that need to track software dependencies, vulnerabilities, licenses, or SBOMs. Its on-premises option is for organizations that want to operate the deployment in their own infrastructure.
Pick SourceTrust if…
SourceTrust suits teams that need to review dependencies and publish license compliance information for shipped products. Eligible public GitHub projects may qualify for its free publishing option; it is software tooling, not legal advice.