Skip to main content

FOSSA

Unclaimed
Human View Machine View

Human View is the company as people read it. Machine View is the same record as agents receive it.

No coverage yet Claim this listing

Show all 21 topics

No article in the knowledge graph for FOSSA yet.

Who is FOSSA?

FOSSA is a private software company that provides enterprise tools for open source license compliance, software composition analysis, and software supply chain risk management.

  • Open source license scanning and policy enforcement
  • Software composition analysis for dependencies and transitive packages
  • Security and vulnerability visibility across application components
  • SBOM generation, inventory, and supply chain reporting workflows
  • Developer workflow integration with source control, build, and CI/CD systems
Show more

More About FOSSA

FOSSA is used in enterprise software development environments to identify, inventory, and govern third party and open source code within application portfolios. Its tooling fits into DevSecOps and software governance programs where engineering, security, and legal teams need a shared view of dependency usage, license obligations, and component level risk. In practice, organizations use it to automate scans during development and build processes, then route findings into review and remediation workflows.

The company is associated with software composition analysis and open source governance, two categories that sit within application security and software supply chain management. Common enterprise use cases include tracking direct and transitive dependencies, detecting known vulnerabilities in included components, generating software bills of materials, and enforcing internal policies for approved licenses and packages. These capabilities are typically applied across repositories, build artifacts, containers, and release pipelines.

FOSSA commonly integrates with source code repositories, package managers, and CI/CD systems so that dependency analysis becomes part of standard engineering workflows rather than a separate audit step. Its coverage is relevant in environments using modern language ecosystems and build frameworks where dependency trees can be large and frequently updated. The platform is generally positioned alongside other application security and DevSecOps tools, but with a focus on open source usage, compliance workflows, and component inventory rather than only on proprietary code testing.

For enterprise teams, the business value of this type of platform is operational control over software reuse and release readiness. It supports internal governance, procurement review, and customer or regulatory reporting tied to software supply chain transparency. In plain terms, FOSSA operates as a company software provider focused on helping enterprises manage open source compliance, component risk, and SBOM related processes across current software delivery environments.

Our description of FOSSA. Updated September 2026.

Market segments

  • Information Technology / Cybersecurity / Application, Cloud & AI Security / Application Security & DevSecOps (SAST/DAST/SCA/Supply Chain)

Similar organizations

Ordered by the topics they cover in common with FOSSA.

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/registry/",
        "name": "Registry",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/registry/fossa/",
        "name": "FOSSA",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/registry/fossa/#organization",
    "@type": "Organization",
    "additionalProperty": [
      {
        "@type": "PropertyValue",
        "name": "Related organizations",
        "propertyID": "https://decisioninsights.ai/ns#relatedOrganizations",
        "value": [
          {
            "@id": "https://decisioninsights.ai/registry/black-duck-inn/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/black-duck-inn/",
            "name": "Black Duck Inn"
          },
          {
            "@id": "https://decisioninsights.ai/registry/oligo-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/oligo-security/",
            "name": "Oligo Security"
          },
          {
            "@id": "https://decisioninsights.ai/registry/native-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/native-security/",
            "name": "Native Security"
          },
          {
            "@id": "https://decisioninsights.ai/registry/-165/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/-165/",
            "name": "Seal Security"
          },
          {
            "@id": "https://decisioninsights.ai/registry/mend/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/mend/",
            "name": "Mend.io"
          },
          {
            "@id": "https://decisioninsights.ai/registry/-85/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/-85/",
            "name": "CloudDefense.AI"
          },
          {
            "@id": "https://decisioninsights.ai/registry/sourceclear/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/sourceclear/",
            "name": "SourceClear"
          },
          {
            "@id": "https://decisioninsights.ai/registry/openchain-project/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/openchain-project/",
            "name": "OpenChain Project"
          }
        ]
      },
      {
        "@type": "PropertyValue",
        "name": "Segment",
        "value": "Information Technology / Cybersecurity / Application, Cloud & AI Security / Application Security & DevSecOps (SAST/DAST/SCA/Supply Chain)"
      }
    ],
    "address": {
      "@type": "PostalAddress",
      "addressCountry": "US",
      "addressLocality": "San Francisco",
      "addressRegion": "CA",
      "postalCode": "94104",
      "streetAddress": "114 Sansome Street Suite #210"
    },
    "description": "FOSSA provides enterprise tools for open source license compliance, software composition analysis, and supply chain risk management.",
    "keywords": [
      "Application",
      "Application Security",
      "CI/CD",
      "Compliance",
      "Components",
      "Containers",
      "DevSecOps",
      "Enterprise",
      "IT Governance",
      "Open Source",
      "Open Source Compliance",
      "Open Source Governance",
      "Open Source License",
      "Remediation",
      "Software",
      "Software Composition Analysis",
      "Supply Chain",
      "Supply Chain Risk Management",
      "Visibility",
      "Vulnerabilities"
    ],
    "knowsAbout": [
      {
        "@id": "https://decisioninsights.ai/term/application/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/application/",
        "name": "Application"
      },
      {
        "@id": "https://decisioninsights.ai/term/application-security/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/application-security/",
        "name": "Application Security"
      },
      {
        "@id": "https://decisioninsights.ai/term/cicd/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/cicd/",
        "name": "CI/CD"
      },
      {
        "@id": "https://decisioninsights.ai/term/compliance/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/compliance/",
        "name": "Compliance"
      },
      {
        "@id": "https://decisioninsights.ai/term/components/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/components/",
        "name": "Components"
      },
      {
        "@id": "https://decisioninsights.ai/term/containers/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/containers/",
        "name": "Containers"
      },
      {
        "@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
        "name": "Cybersecurity"
      },
      {
        "@id": "https://decisioninsights.ai/term/devsecops/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/devsecops/",
        "name": "DevSecOps"
      },
      {
        "@id": "https://decisioninsights.ai/term/enterprise/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/enterprise/",
        "name": "Enterprise"
      },
      {
        "@id": "https://decisioninsights.ai/term/it-governance/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/it-governance/",
        "name": "IT Governance"
      },
      {
        "@id": "https://decisioninsights.ai/term/open-source/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/open-source/",
        "name": "Open Source"
      },
      {
        "@id": "https://decisioninsights.ai/term/open-source-compliance/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/open-source-compliance/",
        "name": "Open Source Compliance"
      },
      {
        "@id": "https://decisioninsights.ai/term/open-source-governance/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/open-source-governance/",
        "name": "Open Source Governance"
      },
      {
        "@id": "https://decisioninsights.ai/term/open-source-license/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/open-source-license/",
        "name": "Open Source License"
      },
      {
        "@id": "https://decisioninsights.ai/term/remediation/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/remediation/",
        "name": "Remediation"
      },
      {
        "@id": "https://decisioninsights.ai/term/software/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/software/",
        "name": "Software"
      },
      {
        "@id": "https://decisioninsights.ai/term/software-composition-analysis-sca/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/software-composition-analysis-sca/",
        "name": "Software Composition Analysis"
      },
      {
        "@id": "https://decisioninsights.ai/term/supply-chain/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain/",
        "name": "Supply Chain"
      },
      {
        "@id": "https://decisioninsights.ai/term/supply-chain-risk-management-scrm/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain-risk-management-scrm/",
        "name": "Supply Chain Risk Management"
      },
      {
        "@id": "https://decisioninsights.ai/term/visibility/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/visibility/",
        "name": "Visibility"
      },
      {
        "@id": "https://decisioninsights.ai/term/vulnerabilities/#definedterm",
        "@type": "DefinedTerm",
        "mainEntityOfPage": "https://decisioninsights.ai/term/vulnerabilities/",
        "name": "Vulnerabilities"
      }
    ],
    "logo": {
      "@type": "ImageObject",
      "url": "https://img.logo.dev/fossa.com?token=pk_CZeihPN_TrqRBIQ1KAv4yQ"
    },
    "mainEntityOfPage": "https://decisioninsights.ai/registry/fossa/",
    "name": "FOSSA",
    "sameAs": [
      "https://www.linkedin.com/company/fossa",
      "https://x.com/getfossa"
    ],
    "url": "https://fossa.com"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/registry/fossa/",
    "@type": "ProfilePage",
    "dateModified": "2026-09-28T10:15:08Z",
    "isPartOf": {
      "@id": "https://decisioninsights.ai/#website"
    },
    "mainEntity": {
      "@id": "https://decisioninsights.ai/registry/fossa/#organization"
    },
    "sdDatePublished": "2026-09-28",
    "sdPublisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai/registry/fossa/"
  },
  {
    "@context": "https://schema.org",
    "@type": "FAQPage",
    "mainEntity": [
      {
        "@type": "Question",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "FOSSA provides enterprise tools for open source license compliance, software composition analysis, and supply chain risk management."
        },
        "name": "Who is FOSSA?"
      },
      {
        "@type": "Question",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "FOSSA competes in: Information Technology / Cybersecurity / Application, Cloud & AI Security / Application Security & DevSecOps (SAST/DAST/SCA/Supply Chain)."
        },
        "name": "What does FOSSA compete in?"
      },
      {
        "@type": "Question",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "No article in the knowledge graph for FOSSA yet."
        },
        "name": "How much coverage does FOSSA have on Decision Insights?"
      }
    ]
  }
]

Is this your company? Get structured data for your own pages

Company details

Headquarters
San Francisco, CA

Third-party company data. Not maintained by Decision Insights.

Connect

Listing Status

We have a listing for FOSSA, but nothing published about it. Claim it to publish your first update. Free.

We monitor public newswires for company news, but haven't found coverage of FOSSA yet. Newswire coverage depends on what a company distributes publicly, through which distributor, and under which license, not on FOSSA itself.

Claim this listing