Freedom251 › Software Composition Analysis Software
Meterian BOSS
What Meterian BOSS is
Meterian BOSS analyzes codebases for security vulnerabilities, license compliance issues, and outdated dependencies. It identifies open-source components and provides interactive HTML, JSON, PDF, and console reports, including a software bill of materials with component licenses and copyright attributions. Reports also offer upgrade paths for vulnerable components and detailed license information. The scanner sends detected component data to Meterian’s cloud; the product page says customers’ source code stays on their premises. BOSS supports a wide range of programming languages and repositories and integrates with any CI/CD pipeline. A GitHub Action can automate scans, though private codebases require a paid plan. The free plan covers unlimited open-source projects and one closed-source project, with 10 analyses per day; each client run counts as one analysis. Public GitHub repositories on the free plan are expected to be scanned every 2.5 hours, on a schedule that varies with platform load. BOSS is available on the web and API, with hybrid deployment. Pricing includes a free plan and paid plans from £2,300/yr.
Who it suits
BOSS suits teams that need to review codebases for vulnerabilities, dependency age, and license issues across supported ecosystems. Teams with private GitHub repositories or higher scan needs should consider its paid plans.
What it does well
- Checks vulnerabilities, licenses, and outdated dependencies
- Produces reports in HTML, JSON, PDF, and console formats
- Includes component licenses and copyright in its SBOM
- Integrates with any CI/CD pipeline
- Free plan covers unlimited open-source projects
What to know first
- Free plan allows 10 analyses per day
- Free plan covers one closed-source project
- Private GitHub codebases require a paid plan
- Free public-repository scans follow a variable schedule
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | Free · Unlimited open-source projects · 1 closed-source project · 10 analyses per day · HTML reports | Free |
| Bootstrap | £2300/year · Unlimited open-source projects · 10 closed-source projects · 100 analyses per day · Text, HTML, JSON reports · CI integration · Basic API access · Email support | £2,300 a year |
| Professional | £8000/year · 50 closed-source projects · 1000 analyses per day · PDF reports · CI native integration · Full API access · Licence Inventory | £8,000 a year |
| Enterprise | Get an estimate · Higher limits · Team management · Licence risk analysis · SBoM compliance report · Custom report formats · Email and phone support | On request |
As meterian.io lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
BOSS combines codebase scanning with license reporting, SBOM generation, and remediation guidance. The free plan has defined analysis and closed-source limits, while paid plans add capacity and reporting options.
Facts from Meterian BOSS's own pages
- CI/CD
- The product page says BOSS integrates with any CI/CD pipeline and supports a wide range of programming languages and repositories. · meterian.io, 11 Oct 2026
- Company
- Meterian lists its headquarters at 196 Freston Road, London, W10 6TT, United Kingdom. · meterian.io, 11 Oct 2026
- Free plan scan schedule
- For public GitHub repositories, the Free plan scans on a variable schedule depending on platform load, with scans expected every 2.5 hours. · meterian.io, 11 Oct 2026
- GitHub integration
- Meterian provides a GitHub Action for automated codebase vulnerability scans, and private codebases require a paid plan. · docs.meterian.io, 11 Oct 2026
- Headquarters
- London, United Kingdom · meterian.io, 28 Sept 2026
- Legal entity
- The company identifies itself in its terms as Meterian Limited, incorporated under the laws of England and Wales. · meterian.io, 11 Oct 2026
- Notifications
- With a subscription plan and Sentinel service, administrators can receive email or Slack alerts about newly ingested vulnerabilities affecting project components. · meterian.io, 11 Oct 2026
- Purpose
- BOSS analyzes codebases to identify security vulnerabilities, license compliance issues, and outdated dependencies. · meterian.io, 11 Oct 2026
- Remediation
- Reports provide an upgrade path for vulnerable components and detailed license information. · meterian.io, 11 Oct 2026
- Reports
- BOSS generates interactive HTML, JSON, PDF, and console reports, including an SBOM with component licenses and copyright attributions. · meterian.io, 11 Oct 2026
- Scanning limits
- The Free plan includes 10 analyses per day, and each run of the client counts as one analysis. · meterian.io, 11 Oct 2026
- Source code handling
- The scanner uploads detected open-source component data to Meterian's cloud servers, and the product page says source code does not leave the customer's premises. · meterian.io, 11 Oct 2026
- Support
- Bootstrap includes email support, while Enterprise includes email and phone support. · meterian.io, 11 Oct 2026