# FOSSA

FOSSA is a cybersecurity company based in the United States, founded in 2015. It has 1 product listed on CybersecTools.

> Open source license compliance and vulnerability management platform

Source: https://cybersectools.com/companies/fossa · Updated October 2026

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security)
- Type: Product vendor
- Headquarters: United States
- Founded: 2015
- Products listed: 1
- Website: [fossa.com](https://fossa.com/)

## What does FOSSA do?

FOSSA provides software composition analysis tools that help organizations manage open source software dependencies, license compliance, and security vulnerabilities. The platform automates the detection and analysis of open source components in software builds, including deep dependencies and transitive libraries. FOSSA's solution integrates into the software development lifecycle and CI/CD pipelines, enabling continuous monitoring and compliance checks throughout development iterations.

The platform includes policy engines that can automatically approve, flag, or deny licenses and dependencies based on organizational requirements. FOSSA Vulnerability Management offers continuous automatic monitoring to detect security vulnerabilities in third-party code and open source components. The tool provides visibility into all open source components used in software projects, helping development and security teams identify license compliance issues, security risks, and remediation paths.

FOSSA serves organizations that use open source software in their internal systems, applications, and commercial products. The platform addresses challenges related to restrictive open source licenses, including copyleft obligations and commercial use restrictions. It generates software bills of materials (SBOM) and helps teams implement continuous compliance practices as part of their continuous delivery processes.

Categories: [Application Security](https://cybersectools.com/categories/application-security), [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence), [GRC](https://cybersectools.com/categories/grc)

## FOSSA products

- [FOSSA](https://cybersectools.com/tools/fossa): Software supply chain security platform for managing open source dependencies (commercial)

---

More on FOSSA: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md