FOSSA vs. FossID Workbench

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
FOSSA
Score 2.0 out of 10
N/A
FOSSA is a software composition analysis tool that continuously scans for open-source components and tracks dependencies and license compliance.N/A
FossID Workbench
Score 0.0 out of 10
Enterprise companies (1,001+ employees)
FossID supports software auditing and compliance. FossID’s Software Composition Analysis (SCA) tool, Workbench, and professional services are designed to ensure comprehensive open source compliance and security in software development. Software Composition Analysis (SCA) FossID Workbench enables precise identification of open source components and vulnerabilities. It integrates into software development cycles, providing license recognition, proactive…N/A
Pricing
FOSSAFossID Workbench
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
FOSSAFossID Workbench
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoYes
Entry-level Setup FeeNo setup feeNo setup fee
Additional DetailsFossID pricing considers several factors such as number of contributors, type of deployment, add-ons, and success accelerator services.
More Pricing Information
Community Pulse
FOSSAFossID Workbench
Best Alternatives
FOSSAFossID Workbench
Small Businesses

No answers on this topic

No answers on this topic

Medium-sized Companies
Veracode
Veracode
Score 8.7 out of 10
Veracode
Veracode
Score 8.7 out of 10
Enterprises
Veracode
Veracode
Score 8.7 out of 10
Veracode
Veracode
Score 8.7 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
FOSSAFossID Workbench
Likelihood to Recommend
5.0
(1 ratings)
-
(0 ratings)
Support Rating
10.0
(1 ratings)
-
(0 ratings)
User Testimonials
FOSSAFossID Workbench
Likelihood to Recommend
FOSSA
The only issue we have had is sometimes the web app is too slow, and that causes issues with us wanting to continue to use FOSSA over going with another tool. That is the only problem. I noticed it happened more recently, but if that is solved now or will be solved, I would 100% recommend this tool to anyone!
Read full review
FossID
No answers on this topic
Pros
FOSSA
  • Setup of tool.
  • Speed of scans.
  • Automated emails with reports.
Read full review
FossID
No answers on this topic
Cons
FOSSA
  • Interface for loading results can be slow, this is the #1 issue we have faced.
  • Speed of scans could be improved.
Read full review
FossID
No answers on this topic
Support Rating
FOSSA
Never needed support but the chat and help seem forefront of the app!
Read full review
FossID
No answers on this topic
Alternatives Considered
FOSSA
BlackDuck and Synk
Read full review
FossID
No answers on this topic
Return on Investment
FOSSA
  • Hard to measure the ROI, but no doubt having licenses be above board is fantastic for protection of your software.
  • Caused developers to make more informed decisions.
Read full review
FossID
No answers on this topic
ScreenShots

FossID Workbench Screenshots

Screenshot of a scan of repositories that detects all Free and Open Source Software (FOSS) from complete components, packages, and libraries to small snippets of open source.Screenshot of a Software Bill of Materials (SBOMs). FossID Workbench can automatically export and import Software Package Data Exchange (SPDX) reports containing license text, copyright statements, vulnerabilities and even snippet level information.Screenshot of a presentation of license-related risks in software that helps to remain compliant. Workbench detects over 2000 different licenses encountered overed years of open source auditing from strong/weak copyleft to the most obscure source-available and non-commercial licenses. Workbench helps users to understand all license related risks that could affect your products and services.Screenshot of Workbench’s comprehensive policy management that can prevent usage of strong/weak copyleft or source-available software licenses in products and services.Screenshot of VulnSnippet Finder: Snippet detection for vulnerable open source snippets. FossID’s Knowledge Base snippet detection capabilities include special detection of vulnerable open source snippets. While most security scanners assume open source vulnerabilities based on component and version, VulnSnippet Finder bases its search on the exact lines of code/snippets that make software vulnerable.