Meterian BOSS review
Broad CI and ecosystem coverage, with paid plans starting at £2,300 per year.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Meterian BOSS scans codebases that use open-source components for known vulnerabilities, license-compliance issues, and outdated dependencies, and identifies upgrade paths. It is aimed at development teams that want those checks in their CI/CD workflows, particularly organizations working across varied languages and build systems. Alongside cloud repository workflows, the product supports command-line scanning and web, API, and self-hosted platforms. Its supported ecosystems range from Java, JavaScript, and Python to C/C++, Rust, Swift/Objective-C, and binaries.
CI integration is a central part of BOSS’s fit. It supports systems including GitHub Actions, Bitbucket Pipelines, Azure DevOps Pipelines, AWS CodeBuild, CircleCI, GitLab CI/CD, and Jenkins, as well as Jira and SonarQube integrations. Policy thresholds can block CI pipeline progression, while autofix workflows can generate pull requests. Reporting formats include HTML, JSON, PDF, and console output; SBOM generation includes CycloneDX JSON and XML. These capabilities make BOSS relevant to teams that need dependency analysis embedded in existing pipelines, though no verified reachability analysis or PR scanning is specified.
The Free plan allows unlimited open-source projects, one closed-source project, and 10 analyses per day, with HTML reports. Bootstrap costs £2,300 per year and adds 10 closed-source projects, 100 daily analyses, JSON and text reports, CI integration, and basic API access. Professional is £8,000 per year for 50 closed-source projects and 1,000 daily analyses, plus PDF reporting, full API access, CI-native integration, and license inventory. Enterprise adds higher limits, team management, license risk analysis, an SBOM compliance report, custom report formats, and email and phone support; its price is not stated here. Choose BOSS if broad CI integration and language coverage matter; consider alternatives if verified reachability or PR scanning is essential.
Meterian BOSS pros and cons
- Where it wins
- Scans for vulnerabilities, license issues, and outdated dependencies
- Supports many languages and CI systems, including GitHub Actions and Jenkins
- Generates SBOMs and can block CI progression with policy thresholds
- Where it doesn't
- Bootstrap starts at £2,300 per year, billed annually
- Free plan is limited to 1 closed-source project and 10 analyses per day
- No verified reachability or pull-request scanning
Meterian BOSS fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update