No. 14 of 28 ·Open Source License Compliance Software

SW360

Web · Linux · Self-hosted · API

Freedom report

Two barsScore 6.4

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely2 of 6 device platforms
DocumentedPlans, terms and facts published

SW360 is ranked #14 of 28 in open source license compliance software on Freedom251. It runs on API, Linux, Self-hosted, Web. There is a free plan.

SW360 plans and pricing

All plans

SW360 Free Open source · EPL-2.0 · Self-managed deployment eclipse.dev · 5 Oct 2026

Compared on open source license compliance software

Obligation tracking: Yes
Attribution reports: Yes
SBOM import formats: SPDX RDF/XML, CycloneDX
Deployment options: both
Source scan methods: multiple

Best SW360 alternatives

See all 20

Two bars FOSSology Free tier No. 1Free6.6 Two bars Apache Flink CDC Free tier No. 2Free6.5 Two bars DeepFilterNet Free tier No. 3Free6.5 Two bars licscan Free tier No. 4Free6.5 Two bars OHRisk Free tier No. 5Free6.5 Two bars OSS Review Toolkit Free tier No. 6Free6.5

The record

Purpose: SW360 is a software catalogue and repository for collecting, organizing, and sharing information about software components used in an organization.
License: The project is open source and licensed under EPL-2.0.
Component tracking: SW360 tracks software components used in projects or products and maintains related component, release, and project information.
License compliance: The application manages license information and obligations and supports workflows for producing license-related documents.
SBOMs: The user guide lists Software Bill of Materials management as a use case.
Vulnerabilities: SW360 collects vulnerability management information and matches it with components stored in its component service.
FOSSology integration: SW360 can trigger a FOSSology clearing process and import its reports; FOSSology performs the license scanning.
API and integrations: SW360 exposes its functionality through a REST API and documents HTTP Basic, API token, OAuth2, and Keycloak authentication options.
Deployment: The recommended SW360 v20 deployment uses containers compatible with Docker or Podman and includes the frontend, Keycloak, CouchDB, and Spring Boot backend.
Security configuration: The security guide recommends TLS with trusted certificates, secret management, and restricting bearer-token validation to trusted issuers.
Who it is for: The project identifies quality managers, software developers, legal counsels, software architects, and R&D managers among the roles served.
Notable limitation: License scanning and source code scanning are outside SW360’s scope; it delegates scanning to specialized tools and exchanges data with them.
Support and community: The documentation lists a developer mailing list, a public Slack channel, and open developer meetings.
Latest release shown: The Eclipse project page lists version 20.1.0, dated July 29, 2026.
Price from: Free

Where it ranks on Freedom251

Best Open Source License Compliance Software in 2026#14 of 28

Is SW360 yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote SW360

Sources

eclipse.dev/sw360/· checked 5 Oct 2026
eclipse.dev/sw360/about/· checked 5 Oct 2026
eclipse.dev/sw360/docs/· checked 5 Oct 2026
eclipse.dev/sw360/docs/userguide/· checked 5 Oct 2026
eclipse.dev/sw360/docs/development/restapi/· checked 5 Oct 2026
eclipse.dev/sw360/docs/deployment/· checked 5 Oct 2026
eclipse.dev/sw360/docs/deployment/deploy-secure-dep· checked 5 Oct 2026
projects.eclipse.org/projects/technology.sw360/governance· checked 5 Oct 2026
projects.eclipse.org/projects/technology.sw360· checked 5 Oct 2026