FOSSA Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines software supply chain security (SSCS) tools as solutions that reduce business technology risk by protecting against compromise from third-party software. Using threat intelligence, software composition analysis, software bills of materials and third-party governance, SSCS tools identify risk and ensure software integrity from acquisition through delivery, supporting SaaS and hybrid models and improving DevSecOps maturity.

Active

Find the top Software Supply Chain Security with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Software Supply Chain Security

FOSSA

IT Security & Risk Management Associate

FOSSA is a strong tool for open-source compliance, this includes security and licensing and overall operational (quality) risk.

30B + USD

50M - 250M USD

3B - 10B USD

Software Development Manager

Customer support is amazing - they have a dedicated team that readily helps their customers and answers their questions and concerns.
The product itself has been on and off but mostly a reliable product

Checkmarx

Black Duck

JFrog

Mend.io

Snyk

Flexera

GitLab

Ion Channel

Sonatype

Tidelift

Cycode

Cybeats

Semgrep

FOSSA is an organization that provides support to software companies, revolutionizing their approach towards their code. FOSSA focuses on laying the groundwork that enables modern teams to effectively incorporate open source into their operations. 

The primary product of FOSSA assists these teams in tracking the open source elements incorporated into their code. It also automates the process of license scanning and compliance. FOSSA's tools have therefore become a crucial element for software shipping. Software industry participants normally utilize code that interacts with FOSSA. The organization has financially supported its operations through venture capital funding.

Open Source has become the critical supplier for modern software companies, changing everything about how people think about their code. FOSSA builds the infrastructure for modern teams to be successful with open source.

FOSSA's flagship product helps teams track the open source used in their code and automate license scanning and compliance. Since then, over 7,000 open source projects (Kubernetes, Webpack, Terraform, ESLint) and companies (Uber, Ford, Zendesk, Motorola) rely on FOSSA's tools to ship software. If you are in the software industry today, you're now using code that runs FOSSA.

FOSSA is a venture funded company backed by Costanoa Ventures, Bain Capital Ventures, etc. with affiliate angels including Marc Benioff (Salesforce), Steve Chen (YouTube), Amr Awadallah (Cloudera), Jaan Tallin (Skype) and Justin Mateen (Tinder).

Reviews

Ratings Overview

Overall experience with

Favorable Review

Responsive Engineering Team Noted Amid Ongoing Functionality and Usability Problems

Critical Review

Robust Open Source License Compliance with Limited Threat Intelligence Support in FOSSA

Likes and dislikes about

likes

dislikes