Easily create a software bill of materials that can be customized for any need:
due diligence, customer requests, government regulations, and more.
Open source software has become ubiquitous in modern software development today — it’s estimated that OSS makes up over 90% of the codebase of modern applications. However, the nature of open source means that it can be difficult for organizations and individuals involved with the product (manufacturers, operators, buyers) to have full visibility into the software supply chain and any license compliance, security, and quality risks that may exist.
A software bill of materials (SBOM) provides vital insight into these areas, enabling organizations to identify and remediate potential security vulnerabilities, fulfill license compliance requirements, and apply version control best practices. Additionally, the Biden Administration's 2021 Cybersecurity Executive Order includes a provision that mandates SBOM creation (for organizations that sell into the federal government), further elevating their importance.
Get an accurate and precise scan of all code dependencies up to an unlimited depth
Pick and choose data fields from a comprehensive list to include in your SBOM
Stay up-to-date with SBOMs that auto-update after every code change
Offers multiple delivery options: Download and distribute the SBOM yourself, or have FOSSA host it for you
Supports multiple reporting formats, including SPDX — an approved delivery format in the U.S. government’s recent cybersecurity executive order
