Generate, Distribute and
Monitor SBOMs
in One Platform
Why you need an SBOM
Comply with the Executive Order, and Stay Ahead
In September 2022, the White House Office of Management and Budget (OMB) released memo M-22-18, instructing federal agencies to adopt guidelines developed by NIST in line with Executive Order 14028 on Improving the Nation’s Cybersecurity. The memo clarifies that SBOMs (Software Bill of Materials) stand as the favored approach to showcase compliance with NIST’s secure software development standards. Furthermore, an increasing number of private sector companies are likely to mandate them.
Learn More About SBOMs
Deepbits White Paper — Evaluating and Benchmarking SBOM Generators: A Systematic Approach
Executive Order on Improving the Nation’s Cybersecurity
SBOM FAQ
How Do You Upgrade OpenSSL in Your Software Stack? — SBOM and OBOM assisted software upgrade
Building SBOMs for COTS Android Apps
How Deepbits Fulfills the Latest FDA Cybersecurity Guidelines for Medical Devices
What Is an SBOM? A List of Ingredients
A Software Bill of Materials (SBOM) is a formal, machine-readable inventory of software components and dependencies that includes information about those components and their hierarchical relationships. It can be shared and exchanged automatically among stakeholders (e.g., software vendors, consumers) to enhance software development, software supply chain management, vulnerability management, asset management, and procurement. This results in reduced costs, security risks, license risks, and compliance risks.
End-to-End SBOM Management
Generate
Distribute
Monitor
Pricing Plan
| Free | Basic (Monthly) | Pro (Monthly) | Premium | |
|---|---|---|---|---|
| Features | $0 | $200 | $1,000 | Contact Us |
| # of Assets | 10 | 100 | 1000 | TBD |
| SBOM Registry | 10 | 50 | 500 | TBD |
| # SBOM subscriber | unlimited | unlimited | unlimited | unlimited |
| Continuous Monitor | Y | Y | Y | Y |
| Smart Query | Y | Y | Y | Y |
| Integrations (webhook, jira, github..) | Y | Y | Y | Y |
| Vulnerability Assessment | Y | Y | Y | Y |
| Malware Detection | Y | Y | Y | Y |
| License Check | Y | Y | Y | Y |
| On-premise deployment | N | N | N | Y |
| Tech Support (business days) | N | 5 | 3 | 1 |
Add-on Service
Red Team: Software Supply Chain Security Assessment| Initial assessment | $20K |
| Routine assessment | $5K |