ScanCode.io
7.0#3 in open source license compliance softwareFree planFree planWebAPILinuxmacOS
VisitScanCode.io vs SourceTrust
SourceTrust
6.7#4 in open source license compliance softwareFrom $299 a yearFree planWeb
VisitWhat both publish
| Fact | ScanCode.io | SourceTrust |
|---|---|---|
| Founded | 2014 | 2026 |
| Headquarters | Brussels, Belgium | Copenhagen, Denmark |
| Purpose | ScanCode.io provides a Web UI and API for running and reviewing complex software composition analysis scans in scripted pipelines. | SourceTrust helps teams review third-party software licenses and publish a shareable license compliance page for products they ship. |
| Support | The documentation directs users to file documentation issues for missing or confusing content. | SourceTrust offers a live walkthrough and lists [email protected] for platform questions. |
| Supported inputs | It can scan containers, Docker images, package archives, and manifests. | The platform overview says it supports 14 formats across 9 ecosystems, including CycloneDX SBOM uploads. |
ScanCode.io plans
- ScanCode.io (Apache-2.0 software)Free
SourceTrust plans
- Open sourceFree
- Per project — monthly$29 a month
- Per project — yearly$299 a year
- Extra watched branch$550 a month
- Custom domain$49,499 a month
- Security monitoring—
Pick ScanCode.io if…
ScanCode.io suits teams automating software composition analysis in CI/CD pipelines or reviewing software packages and containers. It is a fit for users able to run Docker or install it on a Linux server, including those who need an offline deployment.
Pick SourceTrust if…
SourceTrust suits teams that need to review dependencies and publish license compliance information for shipped products. Eligible public GitHub projects may qualify for its free publishing option; it is software tooling, not legal advice.