FossID Workbench
FossID Workbench: A broad SCA platform for source, dependency, license, and SBOM workflows. Ranked #15 of 65 in Software Composition Analysis Software by our editors (7.8/10); pricing: Pricing on request; best for teams needing source and snippet analysis.
At a glance
- Editor score7.8 / 10
- PricingPricing on request
- Best forTeams needing source and snippet analysis
- SBOM generationYes
- Founded2016 · Stockholm, Sweden
- Facts checked22 Sep 2026
Where it wins
- Language-agnostic scanning detects open-source code and snippets
- SBOM export supports SPDX and CycloneDX formats
- Hybrid, on-premises, offline, and cloud deployment options
Where it doesn't
- Pricing requires contact with sales
- No reachability analysis
- Supported dependency ecosystems are defined rather than universal
Our verdict on FossID Workbench
FossID Workbench is a software composition analysis platform for engineering, security, legal, and compliance teams. It identifies declared and undeclared open-source components, direct and transitive dependencies, code snippets, licenses, copyrights, vulnerabilities, and VEX information. Its source scanner is language-agnostic for unmanaged code, while dependency analysis supports Java/Gradle, Java/Maven, Ruby/Bundler, .NET/DotNet, Python/pip, JavaScript/npm, JavaScript/Yarn, C/C++, and Go. Teams needing source and snippet analysis are the clearest fit.
The platform covers both inventory and governance workflows. It generates SBOMs and exports them in SPDX and CycloneDX formats, supports license, copyright, vulnerability, and VEX review, and provides policy management for licenses, security, and component approval. Pull-request diff scanning and annotations can bring review into GitHub, GitLab, and Bitbucket workflows, while CI/CD integrations support scan, gate, and notify processes. A JSON-RPC API adds an automation path for teams that need to connect Workbench with internal systems.
Deployment flexibility is a central consideration. Workbench is available through cloud, hybrid, on-premises, and isolated offline options, which suits organizations with specific infrastructure or data-handling requirements. Pricing is handled through contact with sales rather than published plan tiers. The product is a strong choice for organizations combining source-code discovery, dependency analysis, SBOM work, and policy controls in one program. Teams that specifically require reachability analysis, or prefer transparent self-serve pricing, should evaluate alternatives before choosing it.
Your product? Our editors can test FossID Workbench in depth and publish a review, labelled as paid · from $149/mo →
FossID Workbench pricing
FossID Workbench fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Supported ecosystems | JavaScript (NPM, Bower, PNPM, Yarn), Java/Kotlin (Maven, Gradle, Ivy, Kotlin), Python (PIP, Pipenv, Poetry, Hatch), Rust/Cargo, Dart/Flutter, PHP/Composer, Ruby/Bundler, Go, C/C++/Conan, CocoaPods/Swift, Yocto, Soong, Elixir, Haskell, .NET, SBT |
| SBOM generation | Yes |
| Reachability analysis | Not verified |
| Pull request scanning | Yes |
| Monitored projects | Not verified |
| Deployment options | Hybrid |
| Deployment | Cloud, Self-hosted |
| Platforms | Web, Linux |
| Compliance & security | SSO/SAML |
| Support | Tickets, Docs |
| Built for | Enterprise, Mid-market (editorial estimate) |
| Integrations | 7 integrations: GitHub, GitLab, source-code management systems, CI/CD pipelines, IDEs, command line … See all → |
| Pricing | Pricing on request |
| Website | fossid.com |
| Facts checked | 22 Sep 2026 |
FossID Workbench integrations
FossID Workbench lists 7 integrations on its own site.
- GitHub
- GitLab
- source-code management systems
- CI/CD pipelines
- IDEs
- command line
- JSON-RPC API
See all FossID Workbench integrations →
Alternatives to FossID Workbench
- Snyk Open SourceBroad SCA coverage with reachability, SBOMs, pull-request scanning, and monitoring.9.4
- FOSSAA mature SCA platform covering dependencies, SBOMs, containers, licenses, and policy controls.9.3
- Safeguard SCAA budget-conscious SCA platform with reachability analysis, SBOMs, and remediation workflows.9.1
See all FossID Workbench alternatives →
Also Ranked In
FossID Workbench is ranked in 3 of our directories.
Used FossID Workbench? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used FossID Workbench for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
FossID Workbench is listed in our Software Composition Analysis Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/fossid-workbench/"><img src="https://www.itechguides.com/best/badge/fossid-workbench.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update