FossID Workbench
6.2#7 in open source license compliance softwareWebAPILinuxSelf-hosted
VisitFossID Workbench vs ScanCode.io
ScanCode.io
7.0#3 in open source license compliance softwareFree planFree planWebAPILinuxmacOS
VisitWhat both publish
| Fact | FossID Workbench | ScanCode.io |
|---|---|---|
| Deployment | FossID describes cloud, hybrid, and on-premises deployment options, including an offline air-gapped option. | ScanCode.io can run in a Docker container or be installed on a Linux server. |
| Founded | 2016 | 2014 |
| Headquarters | Stockholm, Sweden | Brussels, Belgium |
| Purpose | FossID Workbench is a software composition analysis tool for identifying third-party components, licenses, and vulnerabilities in codebases. | ScanCode.io provides a Web UI and API for running and reviewing complex software composition analysis scans in scripted pipelines. |
| SBOMs | Workbench supports creating, importing, consolidating, and exporting SBOMs in SPDX and CycloneDX formats. | It supports generating and consuming CycloneDX and SPDX SBOMs. |
| Support | FossID directs customers to its support portal for help and ticket submission. | The documentation directs users to file documentation issues for missing or confusing content. |
FossID Workbench plans
- FossID WorkbenchPriced on request
ScanCode.io plans
- ScanCode.io (Apache-2.0 software)Free
Pick FossID Workbench if…
Workbench is intended for enterprise software teams and people in engineering, DevSecOps, compliance, legal, audit, and security roles. It may suit teams that need to track component licensing and vulnerabilities across codebases.
Pick ScanCode.io if…
ScanCode.io suits teams automating software composition analysis in CI/CD pipelines or reviewing software packages and containers. It is a fit for users able to run Docker or install it on a Linux server, including those who need an offline deployment.