Dev tools · alternatives · 2026
24 alternatives to FOSSA – Effortlessly track and comply with open source licenses
FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management.
FOSSA is a software supply chain security platform that automates open source license tracking and compliance. It generates software bills of materials (SBOMs), analyzes software composition, manages license… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. FOSSA – Effortlessly track and comply with open source licenses launched in 2017; newer entries below may have overtaken it.
- 1
- 2
Automate app security with OSS vulnerability management
2020 · fossa.com · its alternatives →
- 3
Fossa▲5Realtime license management for open source dependencies
2019 · fossa.com · its alternatives →
- 4
Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems. - fossas/fossa-cli
2018 · github.com · its alternatives →
- 5
- 6
- 7
- 8
Keep your JavaScript code secure and compliant with Sandworm
2023 · sandworm.dev · its alternatives →
- 9
Sandworm▲304Keep your JavaScript code secure and compliant with Sandworm
2023 · sandworm.dev · its alternatives →
- 10
Langfuse▲771Open source tracing and analytics for LLM applications
2023 · langfuse.com · its alternatives →
- 11
The index lists either companies that work on open-source products or those that heavily contribute to open-source. Either way, ideal for devs that want to keep an eye out for opportunities. Engineering teams can post for free. Open directory of available positions is here [0]. [0] https://github.com/fossfox-com/fossfox
2023 · fossfox.com · its alternatives →
- 12
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 13
Open SaaS▲505Open-source & 100% free React & Node.js SaaS starter
2024 · github.com · its alternatives →
- 14
- 15BO
Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…
2023 · its alternatives →
- 16
Open Source License Key Generation and Verification Tool written in Go - furkansenharputlu/f-license
2020 · github.com · its alternatives →
- 17
SOOS▲68Developer security, license, compliance and testing platform
2021 · soos.io · its alternatives →
- 18
Slint is a declarative GUI toolkit written primarily in Rust, with API support for multiple programming languages such as C++ and JavaScript. It is designed for desktop and embedded usage. The Slint website has just been redesigned. And we added a new Royalty-Free License option besides GPL and commercial
2023 · slint.dev · its alternatives →
- 19
Kodus▲145Hey everyone, Just wanted to share a quick update we just launched at Kodus. For those who don’t know it yet, Kodus is a code review agent that runs directly in your team’s Git workflow (GitHub, GitLab, Bitbucket… and now Azure DevOps as well). It helps maintain code quality and consistency by analyzing each PR based on your team’s own rules and repository standards. Support for Azure had been a common request — so if your team uses it, you can now plug Kodus right into your workflow and give it a try. Docs: https://docs.kodus.io/how_to_use/en/overview Repo:…
Oct 2025 · kodus.io · its alternatives →
- 20
Secure your JavaScript supply chain – block malware packages
2022 · socket.dev · its alternatives →
- 21
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 22
OpenTrade▲162Open-source trading harness for Claude Code / Codex.
Aug 2026 · github.com · its alternatives →
- 23
An open source security scanner for Visual Studio Code
2020 · snyk.io · its alternatives →
- 24
Free cross-platform deniable encryption cryptoarchiver - GitHub - zorggomat/FractalCryptGUI: Free cross-platform deniable encryption cryptoarchiver
2021 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →