--- title: FOSSA Reviews meta\_title: 'FOSSA Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 15 reviews by the users' company size, role or industry to find out how FOSSA works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 15 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # FOSSA Reviews & Product Details Open source is a critical part of your software. In the average modern software product, over 80% of the source code shipped is derived from open source. Each component can have cascading legal, security, and quality implications for your customers, making it one of the most important things to manage correctly. FOSSA helps you manage your open source components. We plug into your development workflow to help your team automatically track, manage, and remediate issues with the open source you use to: - Stay compliant with software licenses and generate required attribution documents - Enforce usage and licensing policies throughout your CI/CD workflow - Monitor and remediate security vulnerabilities - Flag code quality issues and outdated components proactively By enabling open source, we help development teams increase development velocity and decrease risk. * * * Seller [FOSSA](https://www.g2.com/sellers/fossa) Discussions [FOSSA Community](https://www.g2.com/products/fossa/discuss) Languages Supported English Overview by Abdullah Baig Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 1 month [ View More Pricing Information ](https://www.g2.com/products/fossa/pricing) ## Top-Rated Alternatives [ ![Mend.io](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Mend.io") Mend.io 4.3/5(124) ](https://www.g2.com/products/mend-io/reviews) [ ![Wiz](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Wiz") Wiz 4.7/5(842) ](https://www.g2.com/products/wiz-wiz/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(901) ](https://www.g2.com/products/gitlab/reviews) [ View All Alternatives ](https://www.g2.com/products/fossa/competitors/alternatives) ## User Insights Average based on 15 real user reviews. Implementation Time 1 month [Log in to unlock pricing and user insights](/login) ![Pavan Kumar G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pavan Kumar G.") PG Pavan Kumar G. Software Engineer Information Technology and Services Enterprise (\> 1000 emp.) 3/11/2025 "Fossa for enterprise applications" 4/5 What do you like best about FOSSA? We are using Fossa for spring boot applications and for angular UI applications. We are using maven dependencies for the spring boot applications , Fossa scans our spring boot application after running through the pipeline since we have integrated security tools in our tekton pipeline. Fossa identifies all the libraries and dependencies from our gardle and maven. It will show issues, security , quality of the libraries along with the severity and also recommends the fixes for the vulnerabilities. But sometimes fix won't show immediately. Review collected by and hosted on G2.com. What do you dislike about FOSSA? The main thing I like about the fossa is environment specific and alerts if any dependency have security vulnerabilities fossa will send a alert so that we can easily notice vulnerabilities in the project. Review collected by and hosted on G2.com. What problems is FOSSA solving and how is that benefiting you? The main thing about the fossa it scans all the libraries and find out the vulnerabilities in the project. It saves from data breach and security issues. I will recommend for every enterprise application must use this tool to detect security vulnerabilities. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Dhruv B.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dhruv B.") DB Dhruv B. Software Engineer Small-Business (50 or fewer emp.) 10/31/2022 "Easy to use tool to monitor license compliance" 4/5 What do you like best about FOSSA? Fossa made it easy to import a project, automatically scan all dependencies and generate a report of any compliance issues. It automatically figured out the language and dependency management tools. Fossa has a clean user interface that makes it very easy to see all the different dependencies, their licenses and what actions need to be taken to ensure that my code complies with the licensing requirements of its dependencies. Review collected by and hosted on G2.com. What do you dislike about FOSSA? Many issues flagged by Fossa are shown as flagged and need to be verified manually with messages like "These dependencies can be problematic if used in the wrong ways". It doesn't explain what the wrong way is. Since Fossa has access to my code and its open source dependencies, it should be able to go deeper and find real problems. Review collected by and hosted on G2.com. What problems is FOSSA solving and how is that benefiting you? Software projects have so many dependencies these days. A simple JavaScript app can have hundreds of direct, and thousands of indirect dependencies. Reading all of their licensing requirements and ensuring compliance is not manually feasible. There are other tools like Fossa but Fossa makes the process very intuitive for someone new to this like I am. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Sahil G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sahil G.") SG Sahil G. QA Cybersecurity Engineer Mid-Market (51-1000 emp.) 10/31/2022 "FOSSA for unmanaged dependencies" 3.5/5 What do you like best about FOSSA? the best thing about FOSSA is it is very easy to use and is easily integrated with various CI/CD platforms like Jenkins, Gitlab, Bamboo, Github, etc.. plus we can check vulnerabilities in dependencies on every build and their UI is very user friendly Review collected by and hosted on G2.com. What do you dislike about FOSSA? FOSSA is not performing well when there is no package manager used to manage dependencies like maven, pip, Gradle, etc.. in that case, FOSSA is unable to recognize the libraries and does not report any vulnerability, plus the FOSSA database is not very updated for C/C++, rpm based libraries Review collected by and hosted on G2.com. What problems is FOSSA solving and how is that benefiting you? FOSSA is good when there is the proper usage of the dependency packaging format for the software development and due to its plug and play integration it is very easy to use and developer friendly Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![JAZEEL ANWAR J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "JAZEEL ANWAR J.") JJ JAZEEL ANWAR J. Technical Lead Small-Business (50 or fewer emp.) 10/31/2022 "Best Solution to Open Source Software Licensing Issues" 4/5 What do you like best about FOSSA? It reduces the time needed to identify open-source licensing issues. It is easy to use and it is user-friendly. It allows you to know the licenses of the libraries etc. It offers its service at an affordable price. Review collected by and hosted on G2.com. What do you dislike about FOSSA? There is not much to dislike about the product. There will be difficulty in understanding all the things that it can do. Sometimes the web app is too slow. All other stuff seems good for me. Review collected by and hosted on G2.com. What problems is FOSSA solving and how is that benefiting you? It can be used to scan the licenses of software. The quality of service is excellent, and the user experience is also good. Linking GitHub to FOSSA so that every push will be scanned. The speed of the scan is incredible. Review collected by and hosted on G2.com. Show More 11/14/2022 Validated ReviewerIncentivizedSource: G2 invite KS Karan S. manager Mid-Market (51-1000 emp.) 2/3/2023 "Ensuring Legal Compliance with FOSSA!" 4/5 What do you like best about FOSSA? Their evaluations are highly comprehensive and detailed, and they provide information promptly as required. Review collected by and hosted on G2.com. What do you dislike about FOSSA? The performance of the application's interface is sluggish and the scan speeds are also slow and in need of improvement. Besides these issues, the rest of the features function excellently. Review collected by and hosted on G2.com. What problems is FOSSA solving and how is that benefiting you? FOSSA helps us maintain oversight over our software licenses to ensure compliance and avoid any legal issues in distributing the software we develop. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Telecommunications](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Telecommunications") UT Verified User in Telecommunications Mid-Market (51-1000 emp.) 10/31/2022 "My experience with FOSSA" 4/5 What do you like best about FOSSA? I have used FOSSA for vulnerability testing in my previous organization. FOSSA can be integrated with multiple build systems and it's vulnerability scan is also effective Review collected by and hosted on G2.com. What do you dislike about FOSSA? It is difficult for new users to understand how FOSSA works and how to generate the results. It also needs the training to understand the vulnerability scan and improve code quality Review collected by and hosted on G2.com. What problems is FOSSA solving and how is that benefiting you? FOSSA was used for vulnerability testing, and it generated a scan result that can be used to find the loopholes. The engineering team can use it to improve the code quality of the application. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") EC Verified User in Computer Software Small-Business (50 or fewer emp.) 10/31/2022 "Good tool for FOSS license compliance" 4/5 What do you like best about FOSSA? FOSSA was easy to set up and integrate with our GitHub repositories. Once connected it made it easy to audit the FOSS licenses of the components we use. Review collected by and hosted on G2.com. What do you dislike about FOSSA? Pricing is based on per-developer licensing, which is ok at the beginning but expensive to scale up. Review collected by and hosted on G2.com. What problems is FOSSA solving and how is that benefiting you? We always need to ensure that we aren't accidentally violating the licenses of components and dependencies we use. It took a long time to complete those audits manually. FOSSA quickly scanned all our components and provided a simple report. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite DT Deep T. Senior Legal Recruiter Enterprise (\> 1000 emp.) 10/31/2022 "Review of FOSSA" 3.5/5 What do you like best about FOSSA? I used FOSSA to scan the licenses of software I use. Set up of tool and speed of scanning is great. I also like automated email with reports feature. Review collected by and hosted on G2.com. What do you dislike about FOSSA? Nothing to dislike as of now. Everything seems fine to me. Review collected by and hosted on G2.com. What problems is FOSSA solving and how is that benefiting you? It's very reliable and time saving. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/fossa/pricing) FOSSA Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_c4437e74d48e465e2f7de4b7eba242e7/mend-io.png "Product Avatar Image") Mend.io 4.3/5(124) [ Compare Now ](https://www.g2.com/compare/fossa-vs-mend-io) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4b19d04468104203853f06bfc21a8041/black-duck-sca.png "Product Avatar Image") Black Duck SCA 4.1/5(32) [ Compare Now ](https://www.g2.com/compare/black-duck-sca-vs-fossa) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_630875599869fc792265ba9508dc29e9/snyk.png "Product Avatar Image") Snyk 4.5/5(135) [ Compare Now ](https://www.g2.com/compare/fossa-vs-snyk) ##### Categories on G2 [Vulnerability Scanner](https://www.g2.com/categories/vulnerability-scanner)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Software Bill of Materials (SBOM)](https://www.g2.com/categories/software-bill-of-materials-sbom) ##### Explore More [SurveySparrow vs ExitPro for exit interviews: which exit interview management platform gives HR teams better response rates and more actionable departure insights?](https://www.g2.com/discussions/surveysparrow-vs-exitpro-for-exit-interviews-which-exit-interview-management-platform-gives-hr-teams-better-response-rates-and-more-actionable-departure-insights)[Top platforms for running multi-channel account-based ad campaigns](https://www.g2.com/discussions/top-platforms-for-running-multi-channel-account-based-ad-campaigns)[Which tool is most cost-effective for franchise businesses?](https://www.g2.com/discussions/which-tool-is-most-cost-effective-for-franchise-businesses) [ACCESS Newswire vs Notified Investor Relations Websites vs Presspage for a public company evaluating investor relations website builder platforms: which gives the best combination of SEC-compliant web presence, press release distribution, and investor engagement tools?](https://www.g2.com/discussions/access-newswire-vs-notified-investor-relations-websites-vs-presspage-for-a-public-company-evaluating-investor-relations-website-builder-platforms-which-gives-the-best-combination-of-sec-compliant-web-presence-press-release-distribution-and-investor-engage)[Which tool supports RBA for hybrid cloud environments?](https://www.g2.com/discussions/which-tool-supports-rba-for-hybrid-cloud-environments)[Pros and Cons Details](https://www.g2.com/products/fossa/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)