TrustRadius

FOSSA vs. Sonatype Vulnerability Scanner

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
FOSSA
Score 2.0 out of 10
N/A
FOSSA is a software composition analysis tool that continuously scans for open-source components and tracks dependencies and license compliance.N/A
Sonatype Vulnerability Scanner
Score 9.1 out of 10
N/A
Sonatype Vulnerability Scanner (formerly DepShield) discovers vulnerability among open source components and code in an application. It is available free and open source.
$0
Pricing
FOSSASonatype Vulnerability Scanner
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
FOSSASonatype Vulnerability Scanner
Free Trial
NoYes
Free/Freemium Version
NoYes
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details——
More Pricing Information
Community Pulse
FOSSASonatype Vulnerability Scanner
Best Alternatives
FOSSASonatype Vulnerability Scanner
Small Businesses

No answers on this topic

No answers on this topic

Medium-sized Companies
Veracode
Veracode
Score 8.8 out of 10
Veracode
Veracode
Score 8.8 out of 10
Enterprises
Veracode
Veracode
Score 8.8 out of 10
Veracode
Veracode
Score 8.8 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
FOSSASonatype Vulnerability Scanner
Likelihood to Recommend
5.0
(1 ratings)
9.1
(1 ratings)
Support Rating
10.0
(1 ratings)
-
(0 ratings)
User Testimonials
FOSSASonatype Vulnerability Scanner
Likelihood to Recommend
FOSSA
The only issue we have had is sometimes the web app is too slow, and that causes issues with us wanting to continue to use FOSSA over going with another tool. That is the only problem. I noticed it happened more recently, but if that is solved now or will be solved, I would 100% recommend this tool to anyone!
Verified User
Anonymous
Read full review
Sonatype
Well suited for organizations with small application security team as the solution scales and is easy for devs to use. The only choice if you develop in Java as their data is the most accurate.
Verified User
Anonymous
Read full review
Pros
FOSSA
  • Setup of tool.
  • Speed of scans.
  • Automated emails with reports.
Verified User
Anonymous
Read full review
Sonatype
No answers on this topic
Cons
FOSSA
  • Interface for loading results can be slow, this is the #1 issue we have faced.
  • Speed of scans could be improved.
Verified User
Anonymous
Read full review
Sonatype
No answers on this topic
Support Rating
FOSSA
Never needed support but the chat and help seem forefront of the app!
Verified User
Anonymous
Read full review
Sonatype
No answers on this topic
Alternatives Considered
FOSSA
BlackDuck and Synk
Verified User
Anonymous
Read full review
Sonatype
No answers on this topic
Return on Investment
FOSSA
  • Hard to measure the ROI, but no doubt having licenses be above board is fantastic for protection of your software.
  • Caused developers to make more informed decisions.
Verified User
Anonymous
Read full review
Sonatype
No answers on this topic
ScreenShots