FOSSA

FOSSA

Software supply chain risk management platform

About FOSSA

Simplify's Rating
Why FOSSA is rated
A-
Rated B on Competitive Edge
Rated A on Growth Potential
Rated A on Rating Differentiation

Industries

Enterprise Software

Cybersecurity

Company Size

51-200

Company Stage

Series B

Total Funding

$33.9M

Headquarters

San Francisco, California

Founded

2015

Overview

FOSSA focuses on managing risks in the software supply chain by providing tools for generating and analyzing Software Bills of Materials (SBOM). Their platform helps organizations understand the components of their software, ensuring compliance with regulations and promoting transparency. FOSSA's services include Software Composition Analysis (SCA), which automates the management of open source licenses and helps prioritize vulnerabilities in software. Unlike many competitors, FOSSA has a strong emphasis on both compliance and operationalization, making it essential for large enterprises that need to navigate complex software environments. The goal of FOSSA is to empower organizations to effectively manage their software supply chains and maintain compliance with industry standards.

Simplify Jobs

Simplify's Take

What believers are saying

  • FOSSA's acquisition of StackShare enhances community engagement and developer ecosystem.
  • The rise of DevSecOps practices creates opportunities for FOSSA's integration solutions.
  • Growing importance of SBOMs in government procurement drives demand for FOSSA's tools.

What critics are saying

  • Emergence of new open-source licenses could complicate FOSSA's compliance management offerings.
  • Integration challenges from StackShare acquisition may disrupt FOSSA's operations.
  • AI tools like GitHub Copilot could impact demand for traditional coding practices.

What makes FOSSA unique

  • FOSSA specializes in SBOM generation, ingestion, analysis, and operationalization.
  • The platform offers extensive Software Composition Analysis (SCA) capabilities.
  • FOSSA automates open source license compliance and vulnerability prioritization.

Help us improve and share your feedback! Did you find this helpful?

Funding

Total Funding

$33.9M

Below

Industry Average

Funded Over

3 Rounds

Series B funding is typically for startups that have proven their business model and need more funding to expand rapidly—often by entering new markets or adding more products. Investors are usually venture capital firms that specialize in later-stage investments.
Series B Funding Comparison
Below Average

Industry standards

$35M
$30M
Patreon
$45M
Linktree
$65M
Substack
$100M
ClickUp

Benefits

Unlimited Paid Time Off

Company Equity

Growth & Insights and Company News

Headcount

6 month growth

1%

1 year growth

3%

2 year growth

-1%
TechCrunch
Aug 1st, 2024
Open source startup FOSSA is buying StackShare, a site used by 1.5M developers | TechCrunch

Open source compliance and security platform FOSSA has acquired developer community platform StackShare, the company confirmed to TechCrunch. 

Artificial Lawyer
May 23rd, 2024
Legal Innovators California Sponsors – A Legal Tech Treasure Trove!

On June 4 and 5 the Legal Innovators California conference takes place in San Francisco. Joining us will be more than two dozen companies at the frontier of legal tech and innovation. Here are our sponsors – and what an incredible group they are. Check all of them out below:Headline Sponsor Private Practice Day: StenoHeadline Sponsor In-House Day: SimpleDocsDisputes:StenoRelativityJus MundiClearbriefContracting, Contract Data Management + Legal AI AssistantsSimpleDocsTangibleAvvokaLegalOn TechnologiesHarveyRedactableeBreviaEtainRecitalCentariCallidusLawDroidALSP, Consulting + Advisory:Gravity StackFlatiron Law GroupSkillburst (Digital Learning)ClearyXDWFUnitedLexLegal Ops, Workflows + Risk Management:FossaCohesoAbstractincorporightSimpleClosure–So, if you want to see what’s really happening now in legal tech and innovation, and would like to meet some of the leading companies in the sector, then come along to Legal Innovators California conference – on June 4 + 5 in San Francisco and find out. The event will take place at the CJM, 736 Mission St, San Francisco, CA 94103 and is across two days. For ticket information, please see here.Come along to what will be a great event in San Francisco focused on how the legal world is changing! Plus, you’ll get to meet the people and organisations right at the heart of this market evolution – and what a great group they are! See you there!

Fossa
Mar 12th, 2024
Beyond Vulnerabilities: Understanding Package Health with FOSSA Quality

To help solve this problem, FOSSA, Inc. recently launched FOSSA Quality.

TechCrunch
Nov 20th, 2023
With Functional Source License, Sentry Wants To Grant Developers Freedom ‘Without Harmful Free-Riding’

Yet another software license is vying for the attentions of SaaS companies seeking to align themselves with the open source realm, without compromising their commercial endeavors.Sentry, an app performance monitoring (APM) company that helps companies such as Disney, Microsoft, and Cisco track and resolve laggy or buggy applications, has transitioned its core product to a new license it designed called the Functional Source License (FSL). The company’s open source chief Chad Whitacre says the license is for any SaaS firm that wishes to “grant freedom without harmful free-riding.”“There’s been a long history of companies with deeper pockets and more resources taking advantage of traditional open source companies,” Whitacre told TechCrunch over email. “Open source companies, regardless of license or the pedantic definition, have become increasingly reliant on being venture-backed, for-profit, or more importantly being supported by the companies that rely on their code.”SwitchRecent history is littered with examples of companies that grew off the back of open source projects, but later abandoned those roots to protect their commercial interests. In 2021 Elastic switched Elasticsearch from an Apache 2.0 license to a duo of source-available licenses, a move designed to prevent third-parties such as AWS from essentially selling its own version of Elasticsearch “as-a-service” without contributing much back to the original project. More recently, HashiCorp did something similar with Terraform, while the likes of Element (with Matrix) and Grafana transitioned from permissive open source licenses to so-called “copyleft” licenses, essentially forcing users to keep derivative projects open source, or pay for a license to use the product.As for Sentry, the San Francisco-based company started out more than a decade ago under a permissive BSD 3-Clause license, one that comes with few restrictions. Similar to the other aforementioned companies, Sentry relicensed its core product back in 2019 to counter what co-founder and CTO David Cramer called “funded businesses plagiarizing or copying our work to directly compete with Sentry.“This has included taking marketing content from our website, plagiarizing our documentation and framing it as their own, or straight-up copy/pasting our product visuals,” Cramer wrote at the time

Fossa
Jul 6th, 2022
FOSSA, Inc. launches private beta of Risk Intelligence add-on

FOSSA, Inc. is excited to announce the private beta of its Risk Intelligence add-on to harden your software supply chain.

Recently Posted Jobs

Sign up to get curated job recommendations

FOSSA is Hiring for 1 Jobs on Simplify!

Find jobs on Simplify and start your career today

💡
We update FOSSA's jobs every few hours, so check again soon! Browse all jobs →