license-compliance
(6)
Mend.io
Mend.io, formerly WhiteSource, is a Boston- and Tel Aviv-based application security company that helps development and security teams find and fix vulnerabilities in open source dependencies, custom code, and AI-generated code. Its platform spans software composition analysis (SCA), static and dynamic testing (SAST/DAST), API security, automated dependency updates via Renovate, and a growing suite of AI security tools. Serving more than 1,000 customers including a quarter of the Fortune 100, Mend.io emphasizes automated remediation - producing exact code fixes rather than long lists of alerts - to help teams reduce security debt without slowing delivery.
FOSSA
FOSSA is a San Francisco software company that helps engineering, security, and legal teams manage the open source code inside their software. Its platform automates software composition analysis (SCA), open source license compliance, vulnerability management, and Software Bill of Materials (SBOM) generation - scanning packages, containers, binaries, and code snippets on a continuous basis. Founded in 2015 and used by companies such as Uber, Zendesk, Twitter, Verizon, and UiPath, FOSSA aims to let teams ship fast without sacrificing compliance or security.
Ruvixx, Inc.
Ruvixx is a San Francisco-based SaaS company that helps licensing, brand protection and compliance teams turn scattered data into recoverable revenue. Its platform centralizes intellectual-property workflows - from lead detection to royalty reporting - pairing AI-driven analytics and OSINT with human expert teams. Trusted by enterprises like Dolby, Adobe, Trimble and Chaos Group, Ruvixx targets the trillion-dollar gap between what brands are owed and what they actually collect.
Flexera
Flexera helps large organizations see and control what they actually own and spend across software, SaaS, hardware and cloud. Born in 1987 as the maker of InstallShield, it has grown into a technology value optimization company whose Flexera One platform combines IT asset management, FinOps, SaaS management and IT visibility on top of its proprietary Technopedia data library. More than 50,000 customers, many of them Fortune 500, use Flexera to cut waste, stay license-compliant and turn messy IT estates into decisions.
Ling Xiao
Ling Xiao is the CEO of Ruvixx, Inc., a San Francisco-based SaaS platform helping enterprise brands protect intellectual property, automate license compliance, and convert market opportunities into revenue. A serial entrepreneur with deep roots in Silicon Valley, he co-founded Playdom - the social gaming company acquired by Disney in 2010 for up to $763 million - and later co-founded GGWP, an AI-powered platform tackling toxicity in online gaming. Trained in electrical engineering at UC Berkeley and computer science at Stanford, Xiao brings a rare combination of engineering rigor, product instinct, and entrepreneurial range that has taken him from Google's data teams to Disney's exec suite to the frontier of brand intelligence.
Aaron Williams
Aaron Williams is CEO of FOSSA, the San Francisco software supply chain risk management company that watches the open source dependencies inside enterprise code. He arrived in 2022 as VP of Marketing, was promoted to CMO, and stepped into the top job when founder Kevin Wang moved to Chairman. Two Case Western degrees, twenty-plus years of developer marketing at Sun Microsystems, D2iQ, OmniSci, HEAVY.ai and Civis Analytics, and a long habit of building technical communities around tools engineers actually use.