Open source software has become ubiquitous in modern software development,with many open source libraries now core and essential components of enterprise applications. However, the nature of open source means that it can be difficult for organizations and individuals involved with the product (manufacturers, operators, buyers) to have full visibility into the software supply chain and any license compliance, security, and quality risks that may exist.
As a result, SBOMs have become increasingly popular and valuable to enterprises looking to understand the composition and provenance of their software. By providing key insights in these areas, SBOMs help organizations quickly identify and remediate potential security vulnerabilities, fulfill licensing requirements, and apply version control best practices. Additionally, the Biden Administration's recent Cybersecurity Executive Order includes a provision that mandates SBOM creation (for organizations that sell into the federal government), further elevating their importance.
Get an accurate and precise scan of all code dependencies up to an unlimited depth
Pick and choose data fields to include in your SBOM from a comprehensive list
Get self-updating attributions, bill of materials, and audit bundles with every code change
Select from multiple delivery options: Download and distribute the SBOM yourself, or have FOSSA host it for you
Choose from multiple reporting formats, including SPDX — an approved delivery format in the U.S. government’s recent cybersecurity executive order
