FOSSA

FOSSA is the developer's choice for managing open source risk and reporting. The job it does: collecting evidence and tracking controls for frameworks like SOC 2 or HIPAA.

It makes the most sense for companies that sell to larger customers. They also list Compliance, Developer Tools and Open Source, so expect those to show up in the feature set. They are a mid-sized team, 51 to 200 people, which usually shapes who they work with.

FOSSA is based in San Francisco, California and around since 2015. More on fossa.com.

Our checklist for this category: frameworks covered, auditor network, and integrations. Get the renewal terms in writing before the first invoice.

Every review on Revaw shows how it was verified, so if you know FOSSA well, your review carries weight here.