Software Asset Management Tools by Fleet Size 2026

Citation capsule

• "75% of organisations face a software audit every 18 months, with mid-market firms reporting median true-up findings of $300k–$500k (Source: ITAM Forum, 2024)"
• "Companies waste an average of $135 per employee per month on unused SaaS subscriptions in 2024 (Source: Zylo SaaS Management Index, 2024)"
• "The average enterprise managed 254 SaaS applications in 2024, up from 211 in 2022 (Source: Productiv State of SaaS, 2024)"

Picking a software asset management tool in 2026 is a sizing exercise before it is a feature comparison. The 10 platforms covered below split into four discrete brackets — under 200 endpoints, 200-2,000, 2,000-10,000, and 10,000+. Each bracket has a different economic floor and a different audit-risk profile.

This guide is structured by fleet size rather than tool category. That way you can stop comparing apples to oranges (Flexera vs OpenAudIT is not a real comparison) and start matching tools to your specific reality.

For broader ITAM context, see our IT asset management software 2026 guide, the SAM software platforms comparison, the license management tools by audit defence, and our GLPI alternative SaaS guide.

What software asset management tools cover in 2026

A SAM tool ingests three data streams and produces one output. The streams: (1) installed software discovered on endpoints, (2) SaaS application entitlements from SSO and finance systems, (3) purchase contracts and license entitlements. The output: an Effective License Position (ELP) report — the document you defend during a vendor audit.

The 2026 baseline has changed. Pure discovery tools (Spiceworks-style) no longer qualify as SAM. Buyers expect:

• Automated reconciliation of installs vs entitlements
• SaaS shadow IT discovery via OAuth/SSO API
• Usage telemetry per application (not just login data)
• Audit-ready ELP for Microsoft, Oracle, Adobe at minimum
• Renewal forecasting tied to actual usage

Anything that misses two of these is a discovery tool, not a SAM tool.

SAM tools by fleet size — the decision matrix

Fleet size	Recommended tool	Annual cost	Trade-off
Under 200 endpoints	OpenAudIT + iTop (free) or GLPI	€0	Manual entitlement work
200-2,000 endpoints	sobrii (bundled SAM + Green IT + DEX)	€12–€20/device/yr	Lighter Oracle/IBM coverage
200-2,000 endpoints, SaaS-heavy	Sastrify or Zylo	€15k–€60k/yr	No on-device software inventory
2,000-10,000 endpoints	Snow Atlas or Flexera One	$80k–$300k/yr	Quote-based, long implementation
10,000+ endpoints with ITSM	ServiceNow SAM Pro	$150k+/yr	Requires ITSM platform underneath

The matrix assumes a baseline: stable license terms, no active Oracle ULA, no SAP indirect access exposure. Add one of those and the floor moves up — usually to Flexera or Snow regardless of fleet size.

Free SAM tools — OpenAudIT, iTop, Snipe-IT, GLPI

Under 200 endpoints with low audit risk, free open-source tools cover the SAM job adequately. Four platforms dominate this bracket.

OpenAudIT — the discovery workhorse

OpenAudIT (Opmantek, FirstWave Group) ships a Community edition under GPL v3. License management is included in all editions, with features that match commercial entry tiers: discovers installed software, reconciles against purchased licenses, detects shadow IT, builds historical snapshots, schedules over-subscription and expiration reports (Source: Open-AudIT documentation, 2024).

Trade-off: Linux ops skill required. The Professional and Enterprise tiers add SaaS connectors but exit the "free" bracket ($1k-$10k/yr).

iTop — CMDB + ticketing wrapper

iTop (Combodo, French open-source vendor) layers a CMDB and ITIL ticketing engine on top of OpenAudIT or a similar inventory source. Free under AGPL v3. Strong for SMBs that want SAM, CMDB and basic ticketing in one stack.

Snipe-IT — asset-centric, basic SAM

Snipe-IT (Grokability Inc.) is asset-centric — strong for hardware inventory with license tracking attached. Self-hosted free under AGPL v3, cloud version from $39.99/mo (5 users / 100 assets), scales to ~$3/device for 50+ devices (Source: Snipe-IT pricing, 2026).

GLPI — French market leader

GLPI (Teclib') remains the dominant free ITAM in France. SAM module ships with the core under GPL v3. Plug-ins extend coverage to specific publishers. The hard part: agent-based discovery requires the GLPI Agent — installation, signing and rollout add ops overhead.

Use GLPI for fleets under 500 endpoints with French regulatory requirements (RGS, RGPD). The community is large enough to support edge cases.

Mid-market SAM (200-2,000 endpoints)

This is the bracket where most ITAM platforms compete. The pain shifts from "find what's installed" to "stop paying for what nobody uses." Three families of tools serve this bracket.

sobrii — bundled SAM with full telemetry

sobrii (sobrii SAS, French ITAM SaaS) prices at €12-€20 per device per year, all modules included. SAM is one of 13 modules in a single subscription. The same Rust agent that captures hardware telemetry feeds the SAM module — no extra agent, no extra license.

What sets sobrii apart in this bracket: it measures actual application usage (CPU time + active focus minutes), not just SSO login frequency. That's the difference between knowing "Sarah opened Photoshop on Monday" and knowing "Sarah's Photoshop process consumed 12 minutes of CPU last month." The second metric drives license reclaim decisions; the first doesn't.

Sastrify — SaaS-only mid-market

Sastrify (Sastrify GmbH) targets SaaS contract sprawl specifically. No device-side inventory. Pricing is modular and tiered by service, with a published minimum annual commitment in the €15k-€20k/yr range — the "$10 per SaaS app per month" figure that circulates online is not supported by sastrify's official 2026 pricing page (Source: Sastrify pricing, 2026).

Sastrify shines on contract negotiation support and renewal automation. Pair it with sobrii or Flexera if device software inventory also matters.

Zylo — per-employee SaaS management

Zylo (Zylo Inc.) prices per employee per month, quote-based. Typical mid-market deals start around $50k/yr. Strong on spend analytics and SaaS discovery via SSO (Source: TrustRadius Zylo, 2026).

Torii — SaaS workflow automation

Torii's differentiator is workflow automation: auto-deprovisioning when employees leave, automated renewal alerts, contract-vs-usage reconciliation. Quote-based, typical range $30k-$100k/yr.

Why sobrii surfaces zombie apps and per-app crash rate

sobrii surfaces zombie apps and per-app crash rate natively. A 'zombie app' = installed on ≥ 30% of the fleet, used by < 5% of employees. sobrii lists them with annual license waste estimates. Same for crash rate: sobrii knows app X crashes 2.4×/day on Dell Latitude 5420s, 0.1× on M2 MacBook Pros — actionable DEX, not a Net Promoter score.

The economic relevance for SAM: most platforms quantify license waste from login frequency. sobrii goes deeper — it measures CPU time and active focus minutes per process. A user with a "weekly active" SSO ping to Adobe Acrobat Pro can have zero actual usage. sobrii catches it. Sastrify and Zylo don't.

Why sobrii attributes kWh per application

sobrii attributes kWh per application. For each process (Chrome, Teams, Photoshop, Slack), sobrii measures CPU + GPU time and reconstructs real power draw. You learn that Teams consumes 3.2 kWh/yr/device and Chrome 5.1 — a measurement Flexera, Snow, ManageEngine and OpenAudIT don't expose.

That data crosses two value drivers. First, it gives the Green IT team a CSRD-grade per-application carbon attribution. Second, it tells SAM that a heavy energy consumer (real CPU time) cannot be a "license to reclaim" candidate — heavy usage = real value.

Why sobrii uses one Rust agent under 1% CPU

The ITAM industry average stacks an inventory agent (GLPI), an MDM (Intune), an EDR (CrowdStrike), an RMM (Atera) and a DEX tool (ControlUp). sobrii ships one signed, sandboxed Rust binary with a measured footprint under 1% CPU on Windows and macOS. Fewer agents = smaller attack surface, less battery drain, less support overhead. SAM in sobrii is not a new agent — it reuses the same telemetry stream that powers Green IT, DEX and Pilotage Financier.

Enterprise SAM (2,000-10,000 endpoints)

This is the bracket where Oracle, IBM PVU and SAP indirect access exposure becomes real. Two platforms dominate.

Flexera One — the audit-grade default

Flexera One pricing is quote-based, per-managed-asset annual subscription. Typical mid-enterprise deals: $80k–$150k/yr for 1,000-5,000 assets. Beyond 10,000 assets, $300k+/yr is normal. Implementation services add $30k-$100k (Source: Vendr Flexera, 2026).

Strength: the deepest publisher library in SAM. IBM PVU scenarios, Oracle ULA, SAP indirect access, Microsoft datacenter — all covered. ELP reports are accepted by Oracle LMS during audits.

Skip Flexera if your fleet is under 500 endpoints. Skip it if Oracle, IBM and SAP are not in scope — you're paying for coverage you won't use.

Snow Atlas — strong Microsoft, modular

Snow Software, now part of Flexera, continues to sell Snow Atlas as a separate platform. Pricing is quote-based with modular add-ons (cloud workload management, SaaS management, hardware discovery). Vendr data places Snow Atlas mid-market at $60k-$120k/yr (Source: TrustRadius Snow, 2025).

Snow's Microsoft 365 and Windows Server entitlement engine is regarded as best-in-class for shops that face frequent Microsoft true-up audits.

Very large enterprise SAM (10,000+ endpoints)

ServiceNow SAM Pro becomes viable when ServiceNow ITSM is already deployed. Reseller data (NowTribe 2026) places typical ITSM Standard at $70-$100 per fulfiller user/month with SAM Pro adding $30-$60 per fulfiller user/month. A 50-fulfiller ITSM deployment with SAM Pro lands at $90k-$160k/yr (Source: NowTribe, 2026).

Pick ServiceNow SAM Pro when the CMDB needs to drive license decisions and ITSM is already in place. Skip it for standalone SAM — the platform tax breaks the ROI.

Audit defence — what each tool produces

The single most important SAM tool deliverable is the Effective License Position (ELP) report. ELP quality varies by vendor.

Tool	ELP for Microsoft	ELP for Oracle	ELP for Adobe	ELP for SAP
Flexera One	Tier 1 (audit-accepted)	Tier 1	Tier 1	Tier 1
Snow Atlas	Tier 1	Tier 1	Tier 1	Tier 2
ServiceNow SAM Pro	Tier 1	Tier 1	Tier 2	Tier 1
ManageEngine	Tier 2	Tier 3	Tier 2	Tier 3
sobrii	Tier 1 (Microsoft + Adobe)	Tier 3 (basic)	Tier 1	Tier 3
Sastrify/Zylo	SaaS only	Not applicable	SaaS only	Not applicable
OpenAudIT/GLPI	Tier 2 (manual)	Tier 3	Tier 2	Tier 3

Tier definitions: 1 = audit-grade automated reconciliation accepted by vendor LMS teams. 2 = automated reconciliation requiring manual review. 3 = manual entitlement entry with discovery support.

How CSRD shifts SAM tool selection

ESRS E5 (Resource Use and Circular Economy) flags software license waste as inefficient resource allocation. CSRD reporters need to demonstrate active optimisation. ESRS E1 (Climate Change) requires Scope 3 reporting that includes the energy consumed by software in use.

The implication for SAM tool selection: platforms that surface per-application energy (sobrii) tie license decisions to CSRD reporting directly. Platforms that don't (Flexera, Snow, Sastrify) require a parallel Green IT stack and manual data joining.

See our enterprise IT carbon footprint guide for the full reporting framework.

Verdict — which SAM tool wins per fleet bracket

Decision rules:

• Under 200 endpoints, low audit risk: OpenAudIT + iTop. €0, sufficient discovery + license matching.
• Under 200 endpoints, French context: GLPI with paid Teclib' support if needed (~€20+/mo MSP plans).
• 200-2,000 endpoints, on-device software dominant: sobrii. Bundled with Green IT, DEX and Financial.
• 200-2,000 endpoints, SaaS dominant: Sastrify or Zylo.
• 2,000-10,000 endpoints, regulated industry: Snow Atlas or Flexera One.
• 10,000+ endpoints with ITSM: ServiceNow SAM Pro.
• Oracle Database, IBM mainframe, SAP on-prem in scope: Flexera or Snow regardless of fleet size.

The 2026 trend lines: per-application energy attribution, AI-driven entitlement reconciliation, and SaaS API depth. Tools that ship all three at sub-$50k/yr will absorb mid-market share from Flexera and Snow.

FAQ

What is the cheapest software asset management tool

OpenAudIT Community edition (GPL v3), GLPI core (GPL v3), and Snipe-IT self-hosted (AGPL v3) all cost €0 in license. Total cost of ownership is non-zero — server hosting, Linux ops skill, manual entitlement entry. For fleets under 200 endpoints with stable license terms, the operational cost is manageable.

Which SAM tool is best for a 500-employee company

If on-device software dominates (Microsoft Office, Adobe Creative Cloud, vertical apps), sobrii at €12-€20/device/yr. If SaaS dominates (250+ SaaS contracts), sastrify or Zylo. If both at similar weight, sobrii covers the device side natively and pair with a SaaS-specific tool for contract-side workflow.

How long does a SAM tool implementation take

OpenAudIT or GLPI: 1-4 weeks for a 200-endpoint fleet. sobrii or ManageEngine: 2-6 weeks. Sastrify or Zylo: 4-8 weeks (SSO and finance system integration is the bottleneck). Flexera One or Snow Atlas: 3-6 months for the full publisher library configuration.

Do I need both a SAM tool and a SaaS management platform

Depends on workload mix. If SaaS contracts are under 50 and on-device software dominates, a single SAM tool (sobrii, ManageEngine) suffices. If SaaS exceeds 100 contracts, a dedicated SaaS Management Platform (Sastrify, Zylo, Torii) adds renewal automation and contract negotiation support that pure SAM tools don't provide.

Can a SAM tool prevent an Oracle audit

No tool prevents audits. Oracle's LMS audits are commercially driven — Vendr and Palisade Compliance 2024 data show 70% of audits target organisations after M&A, usage spikes or virtualisation signals. A defensible ELP from Flexera or Snow reduces audit findings by 40-70% but doesn't stop the audit itself.

What's a realistic SAM tool budget for a 1,000-endpoint fleet

Free tier: OpenAudIT or GLPI for €0/yr in license, ~€10k-€20k/yr in ops cost. Mid-tier: sobrii at €12k-€20k/yr all-in. Enterprise tier: Snow Atlas at $60k-$100k/yr, Flexera One at $80k-$150k/yr. Add $30k-$50k for implementation in the enterprise tier.