# SCANOSS

SCANOSS is a cybersecurity company based in Spain, founded in 2021. It has 2 products listed on CybersecTools.

> Software Composition Analysis for open source component identification and SBOM

Source: https://cybersectools.com/companies/scanoss · Updated December 2025

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security)
- Type: Product vendor
- Headquarters: Spain
- Founded: 2021
- Products listed: 2
- Website: [scanoss.com](https://www.scanoss.com/)

## What does SCANOSS do?

SCANOSS provides Software Composition Analysis (SCA) tools and services focused on identifying open source components in software projects. The company operates an Open Source Software Knowledge Base (OSS KB) that is universally accessible through open APIs and distributed by the Software Transparency Foundation. Their platform enables organizations to detect both declared and undeclared open source software in their codebases, including code introduced through copy/paste or AI assistants.

The company's core offering centers on building comprehensive Software Bills of Materials (SBOM) for development teams and businesses. Their technology integrates into development pipelines and delivery processes to provide visibility into software composition. SCANOSS addresses compliance requirements by helping organizations understand licensing terms, manage intellectual property risks, and meet export regulations associated with open source components.

SCANOSS supports multiple open source initiatives and standards organizations including the Eclipse Foundation, OpenChain Project, FOSSology, and Software Heritage. The company's approach emphasizes open standards and open data in the SCA landscape. Their solutions are designed for industries with complex software development needs, including video game companies and enterprises with stringent compliance requirements. The platform helps organizations manage security vulnerabilities, ensure license compliance, and maintain transparency in their software supply chains.

Categories: [Application Security](https://cybersectools.com/categories/application-security), [GRC](https://cybersectools.com/categories/grc), [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence)

## SCANOSS products

- [SCANOSS Encryption Dataset](https://cybersectools.com/tools/scanoss-encryption-dataset): Identifies cryptographic algorithms and libraries in code for compliance (commercial)
- [SCANOSS Security Dataset](https://cybersectools.com/tools/scanoss-security-dataset): Vulnerability detection dataset for declared & undeclared dependencies in code (commercial)

---

More on SCANOSS: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md