FOSSA

FOSSA specializes in delivering a robust platform designed to ensure audit-grade protection for open source dependencies. The company’s offerings encompass solutions for vulnerability management, license compliance, and the management of software bills of materials (SBOMs). FOSSA supports a diverse array of programming languages and seamlessly integrates with various continuous integration/continuous deployment (CI/CD) pipelines. This integration facilitates the automation of compliance processes, secures products, and aids in the management of SBOMs. Additionally, FOSSA enables users to generate, distribute, and monitor application-level SBOMs that adhere to standards set by the National Telecommunications and Information Administration (NTIA) and the Food and Drug Administration (FDA). The platform is developer-centric, offering integrations with popular tools such as JIRA, GitHub, GitLab, and Slack, enhancing workflow efficiency. FOSSA also provides resources for continuous compliance, due diligence, and advancing security measures earlier in the development process. The company has introduced generative AI risk management solutions to further bolster security. Moreover, FOSSA maintains a resource library filled with guides on open source licenses, software composition analysis, and SBOMs, and hosts events and webinars aimed at educating users about software supply chain security and compliance.