Alternatives to FOSSA

FOSSology

FOSSology suits companies, individuals, and groups working to improve open-source license compliance.

RAT suits release teams that need license-focused audits on Linux or self-hosted infrastructure.

DejaCode is aimed at legal and business managers responsible for governing open-source use across products and teams.

ScanCode.io suits teams automating license, vulnerability, and compliance scans in CI/CD pipelines.

FossID Workbench

It suits engineering, DevSecOps, compliance, legal, and audit teams managing third-party code.

Double Open Compliance

It suits teams managing software component security, license obligations, SBOMs, and regulatory due diligence across hosted or self-hosted environments.

licscan

licscan suits developers and teams checking dependency license risk or generating SBOMs and EU CRA evidence in local or CI workflows.

It suits developers and organizations that need to inspect codebases for licensing, package, dependency, or origin information.

OHRisk suits teams that want to assess dependency-license risk in CI or produce reports in several formats.

OSSKB is designed for professional users who need to identify open source components in source code and review information relevant to license compliance.

It suits software developers and project maintainers who want to check and organize licensing information for their own project.

SourceTrust suits teams shipping software that need dependency inventories, license review, attribution outputs, and compliance pages.

Developers who need a graphical way to scan source code for open-source components, licenses, and vulnerabilities.

SW360 is aimed at quality managers, software developers, legal counsels, software architects, and R&D managers handling component, license, vulnerability, or SBOM information.