SBOM Management

Scribe Security

Supply Chain Security

Software supply chain security platform providing SBOM management, code integrity verification, and continuous assurance across the SDLC.

Codenotary

Supply Chain Security

Software supply chain security platform providing attestation, SBOM, and immutable audit logs.

Anchore

Data Pipeline Orchestration

Anchore provides container security and software supply chain compliance tools that help organizations enforce security policies for container images throughout the development pipeline.

aDolus FACT

Supply Chain Visibility

Software bill of materials platform for industrial control systems delivering software supply chain intelligence.

Black Duck

Code Snippet Management

Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code.

Sonatype

Supply Chain Management

Sonatype provides software supply chain management and SCA tools including Nexus Repository and Sonatype Lifecycle for managing open-source security and compliance.

Mend.io

Dynamic Application Security Testing

Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.

Finite State

Supply Chain Security

Connected device security platform providing firmware analysis, SBOM management, and vulnerability detection for IoT and embedded systems.

Kusari

Vulnerability Management Platforms

Software supply chain security platform providing SBOM generation, vulnerability management, and attestation for software integrity.

SOOS

Dynamic Application Security Testing

SOOS provides affordable software composition analysis and DAST solutions that help development teams identify vulnerabilities and license issues in open-source dependencies.

Cybellum

Mobile Application Security

Product security platform delivering SBOM analysis, vulnerability management, and compliance for automotive, medical, and industrial devices.

NetRise

Supply Chain Security

Firmware and software supply chain security platform providing SBOMs, vulnerability detection, and risk scoring for connected devices.

GUAC

Open Source Management

OpenSSF open-source project aggregating software supply chain metadata (SBOMs, SLSA, signatures) into a unified graph.

Manifest Cyber

Supply Chain Security

SBOM management platform enabling organizations to ingest, enrich, and operationalize software bills of materials for supply chain risk management.