# FOSSA: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 21 judge labels across 1 category by 12 of 14 models. Page: https://www.gane.ai/index/it/vendors/fossa

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 9 | 5% | 21 |

## What the models said for it

- "Ranked runner-up in 2026 iTechGuides research: mature SCA platform covering dependencies, SBOMs, containers, licenses and policy controls" (Muse Glimmer 30B, SCA)
- "Choose FOSSA if your risk is primarily legal/compliance-related and you want the simplest possible deployment." (Kimi K2, SCA)
- "Best for policy & compliance (SBOM, licenses): FOSSA or Safeguard SCA (free plans, policy enforcement)" (GLM 4.7 FlashX, SCA)
- "Other top contenders include FOSSA, Safeguard SCA, Socket, Semgrep Supply Chain, and Endor Labs." (Llama 4 Maverick, SCA)

## And against it

- "license compliance depth does not automatically mean superior malware detection, exploitability analysis, or runtime prioritization" (Perplexity Sonar, SCA)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 1 | 0 | 1 | 2 |
| Grok 4.20 | 0 | 0 | 1 | 0 | 1 |
| Mistral Small | 0 | 2 | 1 | 0 | 3 |
| DeepSeek V4 Flash | 0 | 1 | 3 | 0 | 4 |
| Llama 4 Maverick | 0 | 1 | 1 | 0 | 2 |
| Qwen 3.7 Flash | 0 | 1 | 0 | 0 | 1 |
| Kimi K2 | 0 | 1 | 0 | 0 | 1 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 1 | 1 | 0 | 2 |
| GPT-6 Luna | 0 | 1 | 0 | 0 | 1 |
| Muse Glimmer 30B | 0 | 2 | 0 | 0 | 2 |

## Sources returned with these answers

The sites and pages cited by the answers that named FOSSA, from 49 of the 56 answers that named it (only the models that return a source list).

### Domains cited

- dupple.com: 24
- blog.jetbrains.com: 21
- g2.com: 21
- itechguides.com: 21
- upwind.io: 19
- checkmarx.com: 15
- mend.io: 13
- safeguard.sh: 13
- appsecsanta.com: 12
- guideflow.com: 12

### Pages cited

- https://dupple.com/learn/best-software-composition-analysis-tools: 24
- https://blog.jetbrains.com/qodana/2025/09/best-software-composition-analysis-tools: 21
- https://itechguides.com/best/software-composition-analysis-software: 21
- https://upwind.io/glossary/10-best-software-composition-analysis-tools-for-sca: 19
- https://guideflow.com/blog/software-composition-analysis-tools: 12
- https://raven.io/blog/best-software-composition-analysis-tools: 12
- https://res.cloudinary.com/snyk/image/upload/v1731508416/website-pdfs/The-Forrester-Wave-Software-Composition-Analysis-Software-Q4-2024.pdf: 12
- https://checkmarx.com/learn/sca/sca-tools-key-capabilities-11-tools-to-watch-in-2026: 11

## In its own words

What FOSSA's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: Control Your Software Supply Chain (https://fossa.com/)
- For: Engineering (https://fossa.com/)
- Price stated: No credit card required. Free trial includes full access to all features. (https://fossa.com/)
- Starting price: Free (https://fossa.com/pricing)
- Free plan or trial: Free trial includes full access to all features. (https://fossa.com/)
- Certifications: SOC 2
- Customers named: Omnissa, Prometheus, Kubernetes, CNCF, Sentry, UiPath, Applause, Collibra

## What it publishes

Every page fossa.com exposes, read 2026-09-29: 1202 addresses. By kind, pages and the last 90 days:

- blog: 571 pages, 8 in the last 90 days, latest 2026-09-11
- case study: 18 pages, 0 in the last 90 days, latest undated
- conference or event: 28 pages, 0 in the last 90 days, latest undated
- report or ebook: 20 pages, 0 in the last 90 days, latest undated
- comparison: 14 pages, 0 in the last 90 days, latest undated
- glossary or explainer: 138 pages, 0 in the last 90 days, latest undated
- podcast or video: 12 pages, 0 in the last 90 days, latest undated
- news or press: 3 pages, 0 in the last 90 days, latest undated
- Recent: 2026-09-11 blog: Cra 2026 reporting requirements https://fossa.com/blog/cra-2026-reporting-requirements
- Recent: 2026-09-10 blog: Fossa nohau partner software security compliance nordics https://fossa.com/blog/fossa-nohau-partner-software-security-compliance-nordics
- Recent: 2026-08-28 blog: How fossa first hack house reinvented documentation https://fossa.com/blog/how-fossa-first-hack-house-reinvented-documentation
- Recent: 2026-08-17 blog: Cra product classification https://fossa.com/blog/cra-product-classification
- Recent: 2026-08-06 blog: Cra compliance timeline https://fossa.com/blog/cra-compliance-timeline
- Recent: 2026-07-30 blog: Cisa releases 2026 minimum sbom elements https://fossa.com/blog/cisa-releases-2026-minimum-sbom-elements

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.