TrustRadius: an HG Insights company

FOSSA vs. Sonatype Vulnerability Scanner

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    FOSSA

    Score2 out of 10
    N/AFOSSA is a software composition analysis tool that continuously scans for open-source components and tracks dependencies and license compliance.N/A

    Sonatype Vulnerability Scanner

    Score9.1 out of 10
    N/ASonatype Vulnerability Scanner (formerly DepShield) discovers vulnerability among open source components and code in an application. It is available free and open source.

    $0

    Pricing
    FOSSASonatype Vulnerability Scanner
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    FOSSASonatype Vulnerability Scanner
    Free Trial
    NoYes
    Free/Freemium Version
    NoYes
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    User Ratings
    FOSSASonatype Vulnerability Scanner
    Likelihood to Recommend
    5.0
    (1 ratings)
    9.1
    (1 ratings)
    Support Rating
    10.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    FOSSASonatype Vulnerability Scanner
    Likelihood to Recommend
    FOSSA
    The only issue we have had is sometimes the web app is too slow, and that causes issues with us wanting to continue to use FOSSA over going with another tool. That is the only problem. I noticed it happened more recently, but if that is solved now or will be solved, I would 100% recommend this tool to anyone!
    Incentivized
    Read full review
    Sonatype
    Well suited for organizations with small application security team as the solution scales and is easy for devs to use. The only choice if you develop in Java as their data is the most accurate.
    Incentivized
    Read full review
    Pros
    FOSSA
    • Setup of tool.
    • Speed of scans.
    • Automated emails with reports.
    Incentivized
    Read full review
    Sonatype
    No answers on this topic
    Cons
    FOSSA
    • Interface for loading results can be slow, this is the #1 issue we have faced.
    • Speed of scans could be improved.
    Incentivized
    Read full review
    Sonatype
    No answers on this topic
    Support Rating
    FOSSA
    Never needed support but the chat and help seem forefront of the app!
    Incentivized
    Read full review
    Sonatype
    No answers on this topic
    Alternatives Considered
    FOSSA
    BlackDuck and Synk
    Incentivized
    Read full review
    Sonatype
    No answers on this topic
    Return on Investment
    FOSSA
    • Hard to measure the ROI, but no doubt having licenses be above board is fantastic for protection of your software.
    • Caused developers to make more informed decisions.
    Incentivized
    Read full review
    Sonatype
    No answers on this topic
    ScreenShots