Open source software composition analysis and compliance solutions provider.
What it does
Scans application codebases using ScanCode toolkit to discover open-source components and licenses.
Automates vulnerability tracking and security checks through standardized package databases.
Manages software bill of materials and organization-wide usage policies via enterprise applications.
Delivers professional open-source audits and consulting services for due diligence.
Why it works
Open-source foundation provides transparent and customizable code analysis tools for developers.
Hybrid product model combines free tools with enterprise SaaS governance dashboards.
Comprehensive vulnerability mapping addresses critical software supply chain security needs.
Deep multi-language support integrates smoothly into existing software development pipelines.
Open source software composition analysis and compliance solutions provider.
Overview
nexB provides open-source tools and enterprise solutions for software composition analysis, license compliance, and software supply chain security. The platform helps development and legal teams track open-source components, identify vulnerabilities, and generate software bills of materials. It automates FOSS compliance workflows across diverse programming languages and environments. Enterprises rely on its hybrid solutions to manage third-party software risks effectively.
Founded year:2003
Founder:Michael J. Herzog, Philippe Ombrédanne, François Granade
Deep multi-language support integrates smoothly into existing software development pipelines.
Founder story
Founded in 2003 by Michael J. Herzog, Philippe Ombrédanne, and François Granade, nexB is headquartered in San Carlos, California. The company was established to help organizations effectively leverage open-source software while actively complying with license conditions and supply chain security regulations.
Alternatives
Comparison overview
nexB relies heavily on an open-source tool foundation through the AboutCode stack for code provenance, whereas competitors like Snyk focus primarily on developer-first vulnerability scanning.
It provides hybrid deployment options with specialized enterprise governance dashboards tailored for legal and compliance managers.