Full-Time
Posted on 10/6/2025
Generates SBOMs, analyzes software risk
$200k - $240k/yr
Boston, MA, USA
In Person
FOSSA provides software supply chain risk management and Software Composition Analysis (SCA) to enterprises, generating and analyzing Software Bills of Materials (SBOMs) and turning them into actionable data. It scans code and dependencies, builds SBOMs, and analyzes them for regulatory compliance, transparency, and risk, while automating findings into development and security workflows via its SaaS platform. The service differentiates itself with its enterprise-scale focus on SBOM generation and operationalization alongside comprehensive SCA that covers licenses and vulnerabilities in one system. Its goal is to help organizations reduce software supply chain risk, meet regulatory requirements, and improve visibility into their software stack.
Company Size
51-200
Company Stage
Series B
Total Funding
$33.9M
Headquarters
San Francisco, California
Founded
2015
Help us improve and share your feedback! Did you find this helpful?
Unlimited Paid Time Off
Company Equity
FOSSA has acquired EdgeBit, which pioneered automated dependency updates using a world-class static analysis engine.
Open source compliance and security platform FOSSA has acquired developer community platform StackShare, the company confirmed to TechCrunch.
On June 4 and 5 the Legal Innovators California conference takes place in San Francisco. Joining us will be more than two dozen companies at the frontier of legal tech and innovation. Here are our sponsors – and what an incredible group they are. Check all of them out below:Headline Sponsor Private Practice Day: StenoHeadline Sponsor In-House Day: SimpleDocsDisputes:StenoRelativityJus MundiClearbriefContracting, Contract Data Management + Legal AI AssistantsSimpleDocsTangibleAvvokaLegalOn TechnologiesHarveyRedactableeBreviaEtainRecitalCentariCallidusLawDroidALSP, Consulting + Advisory:Gravity StackFlatiron Law GroupSkillburst (Digital Learning)ClearyXDWFUnitedLexLegal Ops, Workflows + Risk Management:FossaCohesoAbstractincorporightSimpleClosure–So, if you want to see what’s really happening now in legal tech and innovation, and would like to meet some of the leading companies in the sector, then come along to Legal Innovators California conference – on June 4 + 5 in San Francisco and find out. The event will take place at the CJM, 736 Mission St, San Francisco, CA 94103 and is across two days. For ticket information, please see here.Come along to what will be a great event in San Francisco focused on how the legal world is changing! Plus, you’ll get to meet the people and organisations right at the heart of this market evolution – and what a great group they are! See you there!
To help solve this problem, FOSSA, Inc. recently launched FOSSA Quality.
Yet another software license is vying for the attentions of SaaS companies seeking to align themselves with the open source realm, without compromising their commercial endeavors.Sentry, an app performance monitoring (APM) company that helps companies such as Disney, Microsoft, and Cisco track and resolve laggy or buggy applications, has transitioned its core product to a new license it designed called the Functional Source License (FSL). The company’s open source chief Chad Whitacre says the license is for any SaaS firm that wishes to “grant freedom without harmful free-riding.”“There’s been a long history of companies with deeper pockets and more resources taking advantage of traditional open source companies,” Whitacre told TechCrunch over email. “Open source companies, regardless of license or the pedantic definition, have become increasingly reliant on being venture-backed, for-profit, or more importantly being supported by the companies that rely on their code.”SwitchRecent history is littered with examples of companies that grew off the back of open source projects, but later abandoned those roots to protect their commercial interests. In 2021 Elastic switched Elasticsearch from an Apache 2.0 license to a duo of source-available licenses, a move designed to prevent third-parties such as AWS from essentially selling its own version of Elasticsearch “as-a-service” without contributing much back to the original project. More recently, HashiCorp did something similar with Terraform, while the likes of Element (with Matrix) and Grafana transitioned from permissive open source licenses to so-called “copyleft” licenses, essentially forcing users to keep derivative projects open source, or pay for a license to use the product.As for Sentry, the San Francisco-based company started out more than a decade ago under a permissive BSD 3-Clause license, one that comes with few restrictions. Similar to the other aforementioned companies, Sentry relicensed its core product back in 2019 to counter what co-founder and CTO David Cramer called “funded businesses plagiarizing or copying our work to directly compete with Sentry.“This has included taking marketing content from our website, plagiarizing our documentation and framing it as their own, or straight-up copy/pasting our product visuals,” Cramer wrote at the time