FossID Workbench vs Lineaje Open Source Manager
FossID Workbench
fossid.comLineaje Open Source Manager
lineaje.comSide by side
| Figure | FossID Workbench | Lineaje Open Source Manager |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 1 |
| Spec score · Dependency Management Software | 8.2 (#8) | 7.1 (#21) |
| Company | FossID says it was founded in 2016 and was reacquired by its founders in 2022 after being acquired by Snyk in 2021. | Lineaje says it was founded in 2022. |
| Founded | 2016 | 2022 |
| Headquarters | Stockholm, Sweden | Lineaje lists its U.S. office at 4699 Old Ironsides Drive, Suite 450, Santa Clara, California 95054. |
| Integrations | Workbench can import code from GitHub, GitLab, and Bitbucket, and supports CI/CD workflows, a Workbench Agent, and an API for custom scans, gates, and notifications. | Lineaje documents integrations with SonarQube and Checkmarx that bring their results into the product for policy application and remediation planning. |
| Intended users | FossID describes its tools for engineering, DevSecOps, compliance, legal, and audit teams, and says it is trusted by enterprise software teams. | Lineaje describes OSM as enterprise open-source governance for complex organizations and says it aligns legal, engineering, DevOps, DevSecOps, GRC, and product management teams. |
| Purpose | FossID Workbench is a software composition analysis tool for identifying third-party components, licenses, and vulnerabilities in codebases. | Open Source Manager provides visibility into open-source components in applications and helps organizations manage and mitigate the risks they create. |
Plans
Lineaje Open Source Manager
- Open Source ManagerPriced on request
In their own words
FossID Workbench
FossID Workbench is a software composition analysis tool for identifying and governing third-party software in codebases. It analyzes direct and transitive dependencies, scans unmanaged source code across programming languages, and detects embedded open-source snippets, including modified code. ID Assist proposes component identifications, while License Extractor extracts file-level license text. Vulnerable Snippet Finder locates code blocks linked to CVEs, with VEX data adding exploitability context. Workbench creates, imports, consolidates, and exports software bills of materials with component, license, vulnerability, and usage information in SPDX or CycloneDX formats. Policy Management can enforce license, security, and usage rules across projects. GitHub, GitLab, and Bitbucket imports are supported, alongside CI/CD scanning, gating, pull-request notifications, and API workflows. Deployment options include cloud, hybrid, on-premises, and offline air-gapped setups. It supports many ecosystems, including JavaScript, Java/Kotlin, Python, Rust, Go, C/C++, .NET, and others. Pricing is available on request.
Lineaje Open Source Manager
Lineaje Open Source Manager has no write-up on Specifiction yet; its figures are above.