---
title: FOSSA Reviews
meta_title: 'FOSSA Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 15 reviews by the users' company size, role or industry to
  find out how FOSSA works for a business like yours.
aggregate_rating:
  rating_value: 4.2
  review_count: 15
  scale: '5'
date_modified: '2026-08-09'
parent_category:
  name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t"
  url: https://www.g2.com/categories/devsecops
---


# FOSSA Reviews
**Vendor:** FOSSA  
**Category:** [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis)  
**Average Rating:** 4.2/5.0  
**Total Reviews:** 15
## About FOSSA
Open source is a critical part of your software. In the average modern software product, over 80% of the source code shipped is derived from open source. Each component can have cascading legal, security, and quality implications for your customers, making it one of the most important things to manage correctly. FOSSA helps you manage your open source components. We plug into your development workflow to help your team automatically track, manage, and remediate issues with the open source you use to: - Stay compliant with software licenses and generate required attribution documents - Enforce usage and licensing policies throughout your CI/CD workflow - Monitor and remediate security vulnerabilities - Flag code quality issues and outdated components proactively By enabling open source, we help development teams increase development velocity and decrease risk.



## FOSSA Pros & Cons
**What users like:**

- Users appreciate the **easy integrations** of FOSSA, seamlessly working with Maven and Gardle in their pipelines. (1 reviews)
- Users benefit from Fossa&#39;s **effective issue resolution** , identifying vulnerabilities and recommending fixes for library dependencies. (1 reviews)
- Users value the **effective remediation solutions** of FOSSA, which identify and suggest fixes for vulnerabilities in applications. (1 reviews)
- Users value FOSSA for its **effective risk management** , identifying library issues and recommending fixes swiftly. (1 reviews)
- Users value FOSSA&#39;s **security insights** that identify vulnerabilities and recommend fixes for their applications. (1 reviews)
- Security Scanning (1 reviews)
- Testing Services (1 reviews)
- Vulnerability Detection (1 reviews)
- Vulnerability Identification (1 reviews)

## FOSSA Reviews
  ### 1. "The FOSSA Experience"

**Rating:** 5.0/5.0 stars

**Reviewed by:** Elvis M. | System Engineer Associate, Mechanical or Industrial Engineering, Enterprise (> 1000 emp.)

**Reviewed Date:** September 07, 2023

**What do you like best about FOSSA?**

The product is effective and efficient and it has aspects that enable automated scans of emails and licenses which are quite amazing.
The product is also easy and simple to use and also integrates quite easily with other applications which awesome.

**What do you dislike about FOSSA?**

The performance of the product is amazing except that sometimes the system is sluggish though not often.

Amazing product.

**What problems is FOSSA solving and how is that benefiting you?**

It is through this platform that we are able to monitor and ensure all legal and licenses compliances to avoid any issues during our sales and marketing.

  ### 2. The FOSSA Effect.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Yatur N. | Sales Manager , Information Technology and Services, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 25, 2023

**What do you like best about FOSSA?**

This product is easy and simple to use and integrates very well with other applications like Gitlab. I like how effective and efficient with multiple build systems and its vulnerability. Another aspect is the automated scans of emails and licences which are quite amazing.

**What do you dislike about FOSSA?**

The system is sometimes slow though not quite often. This can be improved.

**What problems is FOSSA solving and how is that benefiting you?**

It is through this platform that we have ensured there's license compliance and avoided any issues when we're doing our sales and marketing of our products.

  ### 3. Helped me find major problems in my code

**Rating:** 5.0/5.0 stars

**Reviewed by:** kanti b. | Senior Relationship Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 31, 2022

**What do you like best about FOSSA?**

Using Fossa I was able to import my project from GitHub, run a scan and immediately it pointed out all the licensing problems in my code. It discovered several dependencies that I was not legally allowed to use without a license!

**What do you dislike about FOSSA?**

While Fossa discovered 3 major problems and suggested a way to resolve them, it also found 8 problems with unclear resolution that need a manual review. Since I am not a legal expert, the vague error is hard to understand and resolve.

**What problems is FOSSA solving and how is that benefiting you?**

Since I am a Node developer, I use `npm` packages all the time. My app has many dependencies which themselves have many more. I cannot manually go and check out the licenses of all these hundreds of OSS packages. Fossa is useful for me as it identifies the main 10 or so dependencies that I need to check and can assume my project is legally using the rest.

  ### 4. FOSSA REVIEW

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Leisure, Travel & Tourism | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 21, 2022

**What do you like best about FOSSA?**

FOSSA stands for Free and Open Source Software Analysis which automates the management of open source compliance and security. Up to 90% of the code in software development is subject to open-source licensing, and it is susceptible to plenty of security and legal issues. FOSSA takes care of this issue with its security management toolkit that alerts enterprises if they are at risk by looking into the known vulnerabilities and license management in the open-source code.

**What do you dislike about FOSSA?**

The UI of FOSSA loads slowly, and even though it is claimed that FOSSA scans in real-time, the speed with which the scan is done can be drastically improved for an overall better user experience.

**What problems is FOSSA solving and how is that benefiting you?**

Once FOSSA was implemented, the developer team had much more time on hand than before since many hours were put into open-source compliances previously. FOSSA seamlessly integrated into the development workflow and drove open-source brilliance.

  ### 5. For competence and due diligence use this product!!

**Rating:** 4.5/5.0 stars

**Reviewed by:** Eric I. | Paving advisor, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 31, 2022

**What do you like best about FOSSA?**

They are very comprehensive and thorough in their evaluations and send info when needed.

**What do you dislike about FOSSA?**

While I am no engineer, I d have some background, but these guys and girls are brilliant, sometimes too brilliant for me and I need to dumb it down. But, no complaints as of now.

**What problems is FOSSA solving and how is that benefiting you?**

Risk management comes to mind. I don't feel as vulnerable as I was in the past. They came through and laid a plane out for security and to keep things safe and secure. The only issue I have had was lag in my internet, which is not on them.

  ### 6. Best SaaS for License Scanning & Automation

**Rating:** 4.5/5.0 stars

**Reviewed by:** Umesh Kumar J. | d, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 02, 2022

**What do you like best about FOSSA?**

The automated scans of email and licenses attracted me the most. Overall as of now I found Fossa is the best solution in the market for the scanning and verification of licences.

**What do you dislike about FOSSA?**

The interface of the application is slow, and the speed of the scans is also plodding and needs improvement. Apart from these, everything works great !!

**What problems is FOSSA solving and how is that benefiting you?**

We use FOSSA to keep the check over our software so that the licenses we use to create any software are okay and we can distribute it without legal complications.



- [View FOSSA pricing details and edition comparison](https://www.g2.com/products/fossa/reviews?filters%5Bnps_score%5D%5B%5D=5&section=pricing&secure%5Bexpires_at%5D=2026-08-12+11%3A08%3A53+-0500&secure%5Bsession_id%5D=c22c8600-0185-4c69-b318-c42b68c3da4e&secure%5Btoken%5D=68da17be705ad95295bffb301d19da6bbec6c8df6d96106b93ee97620c2cc4e2&format=llm_user)

## FOSSA Features
**Performance**
- Issue Tracking
- Detection Rate
- False Positives
- Automated Scans
- Anomaly/Malware Detection

**Functionality - Software Composition Analysis **
- Language Support
- Integration
- Transparency

**Functionality - Software Bill of Materials (SBOM)**
- Format Support
- Annotations
- Attestation

**Network**
- Compliance Testing
- Perimeter Scanning
- Configuration Monitoring
- Vulnerability Scanning
- Source-Code Scanning
- Web Scanning

**Effectiveness - Software Composition Analysis**
- Remediation Suggestions
- Continuous Monitoring
- Thorough Detection

**Management - Software Bill of Materials (SBOM)**
- Monitoring
- Dashboards
- User Provisioning

**Application**
- Manual Application Testing
- Static Code Analysis
- Black Box Testing
- Risk Analysis

**Agentic AI - Vulnerability Scanner**
- Autonomous Task Execution
- Proactive Assistance

**Additional Functionality**
- SSL Security
- HIPAA Compliant
- API
- Threat Response
- Endpoint Protection
- Maintenance Scheduling
- Third-Party Integrations
- Security Auditing
- Application Security
- Encryption
- Network Security
- Real-Time Reporting
- AI Copilot
- Reporting/Analytics
- Authentication
- Financial Data Protection
- Anti Virus
- Secure Data Storage
- Virus Definition Update
- Activity Dashboard
- VPN
- Audit Trail
- Anti Spam
- Access Controls/Permissions
- Data Visualization
- Alerts/Escalation
- Data Security
- Runtime Container Security
- Asset Discovery
- Threat Intelligence
- Vulnerability Protection
- Alerts/Notifications
- Vulnerability/Threat Prioritization
- Generative AI
- SQL Injections
- Real-Time Analytics
- Threat Protection
- Web-Application Security
- Password Protection
- Website Crawling
- Vulnerability Assessment

## Top FOSSA Alternatives
  - [Mend.io](https://www.g2.com/products/mend-io/reviews) - 4.3/5.0 (117 reviews)
  - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (838 reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (885 reviews)

