FossID Workbench
6.2#7 in open source license compliance softwareWebAPILinuxSelf-hosted
VisitFossID Workbench vs SourceTrust
SourceTrust
6.7#4 in open source license compliance softwareFrom $299 a yearFree planWeb
VisitWhat both publish
| Fact | FossID Workbench | SourceTrust |
|---|---|---|
| Founded | 2016 | 2026 |
| Headquarters | Stockholm, Sweden | Copenhagen, Denmark |
| Integrations | Workbench can import code from GitHub, GitLab, and Bitbucket, and supports CI/CD workflows, a Workbench Agent, and an API for custom scans, gates, and notifications. | The site lists GitHub, GitLab, and Azure DevOps repository connections, plus lockfile and SBOM imports. |
| Purpose | FossID Workbench is a software composition analysis tool for identifying third-party components, licenses, and vulnerabilities in codebases. | SourceTrust helps teams review third-party software licenses and publish a shareable license compliance page for products they ship. |
| Support | FossID directs customers to its support portal for help and ticket submission. | SourceTrust offers a live walkthrough and lists [email protected] for platform questions. |
FossID Workbench plans
- FossID WorkbenchPriced on request
SourceTrust plans
- Open sourceFree
- Per project — monthly$29 a month
- Per project — yearly$299 a year
- Extra watched branch$550 a month
- Custom domain$49,499 a month
- Security monitoring—
Pick FossID Workbench if…
Workbench is intended for enterprise software teams and people in engineering, DevSecOps, compliance, legal, audit, and security roles. It may suit teams that need to track component licensing and vulnerabilities across codebases.
Pick SourceTrust if…
SourceTrust suits teams that need to review dependencies and publish license compliance information for shipped products. Eligible public GitHub projects may qualify for its free publishing option; it is software tooling, not legal advice.