Fossa
San Francisco, US · Founded 2015 · 61 employees on LinkedIn · 9 known investors
Find your way into Fossa
536 people in our graph share verified history with the Fossa team — schools, employers, funds. One of them is your warm intro.
FOSSA provides audit-grade open source license compliance software that scans codebases with full-text analysis to detect licenses, enforce policies, and automatically generate attribution documents. It serves both developer and legal teams by integrating license scanning into CI/CD pipelines and development workflows.
Also known as FOSSA
Founders & leadership
Fossa was founded in 2015 by Kevin Wang.
Investors · 9
Company profile
researched Aug 2026FOSSA develops software that helps organizations manage risk in third-party and open source code across the software development lifecycle. The platform scans packages, containers, SBOMs, binaries, and code snippets to identify open source components, detect license obligations, and surface security vulnerabilities, with support advertised for major programming languages, frameworks, and CI/CD runtimes.
The product workflow is organized around four stages: scanning dependencies across the SDLC, preventing issues through automated policy enforcement, remediating vulnerabilities, license problems, and end-of-life components through guided fixes, and reporting via generated SBOMs and license attribution notices. Stated use cases include reducing legal and intellectual property risk, consolidating vulnerability management across security scanning tools, meeting regulatory SBOM reporting requirements, and keeping dependencies up to date. The company has also introduced fossabot, an AI agent for strategic dependency updates.
Business model
FOSSA sells a software platform to organizations, positioning enterprise support and fast onboarding; prospective users can start with a free trial that includes full feature access without a credit card, and sales are supported by demo requests with company experts.
Latest developments
FOSSA announced fossabot, an AI agent for strategic dependency updates, and published customer stories covering software transparency and compliance programs at Omnissa, Sentry, UiPath, and Collibra.
▸Full profile — market position, technology, go-to-market
Market position
Positioned as a developer-first software supply chain management platform spanning license compliance, vulnerability management, and SBOM reporting, citing use by CNCF projects and enterprise software vendors.
Emphasizes developer-first usability, automation, broad artifact and ecosystem coverage, fast insights, and audit-grade compliance reporting, alongside SOC 2 compliance and enterprise support.
Technology
Scanning and analysis across multiple artifact types — packages, containers, SBOMs, binaries, and snippets — combined with automated policy enforcement, guided remediation, SBOM and attribution report generation, and integrations spanning major programming languages, frameworks, and CI/CD runtimes.
Go-to-market
Direct enterprise sales through demo requests, supported by a self-serve free trial, published customer case studies, developer documentation, and adoption among open source foundation projects.
Engineering, developer, security, and legal stakeholders at software-producing organizations, including large enterprises and open source projects; referenced users include Omnissa, Sentry, UiPath, Collibra, and CNCF projects such as Prometheus and Kubernetes.
Compiled by commissioned research from 1 cited public sources — announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed — not independently audited.
Founder mafia
5 people who came through Fossa went on to found or lead other companies.
Timeline · 1
launches, deals, and filingsFOSSA announced fossabot, an AI agent focused on strategic dependency updates.
Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.
In the news
▸Research sources · 1
primary sources listed
- Fossafossa.com · web
1 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does Fossa do?
- FOSSA offers software supply chain tooling for open source license compliance, vulnerability management, and SBOM generation.
- Who founded Fossa?
- Fossa was founded by Kevin Wang in 2015.
- Who are Fossa's investors?
- Fossa's investors include Canvas Ventures, Metaplanet, Modern Technical, Norwest Venture Partners, 1517, Bain Capital Ventures, Costanoa Ventures, Jam Fund and 1 more.
- Where is Fossa headquartered?
- Fossa is headquartered in San Francisco, US.