My company helps organisations manage business risk associated with open source software components.
Create open source software policies
build continual compliance into DevOps processes
Manage IP, licensing, license compliance and security risk at source. We change processes to pro-actively avoid the problem happening rather than audit, react and fix which is expensive and time consuming.
See https://mcallinan.wordpress.com/