FOSSA

FOSSA (operating at fossa.com) is a software supply chain security platform engineered for enterprises navigating the complexities of modern development. Founded in 2015 by Kevin Wang and headquartered in San Francisco, FOSSA automates critical tasks that traditional tools fail to address—such as generating Software Bill of Materials (SBOMs), analyzing open-source dependencies, and managing license compliance. Under the hood, the platform leverages automated dependency scanning and vulnerability detection to provide real-time insights into software composition risks. This allows developers and security teams to streamline compliance workflows, mitigate supply chain threats, and operationalize secure software practices at scale. Backed by $33.9 million in funding across three rounds, FOSSA serves as a cornerstone for enterprises seeking to balance innovation with rigorous risk management in their software supply chains.