Blog & Insights

Insights and Updates

Latest thinking on SBOMs, supply chain security, and the regulations shaping both.

We should already know where PHP is running

Discover how to effectively manage PHP installations and vulnerabilities with automated inventory tracking and SBOM integration for enhanced security.

Your SBOM Program May Already Be a CIS Controls Program

Learn how SBOM management supports key CIS Controls for application security, vulnerability management and continuous software supplier governance.

AI Coding Tools Are Quietly Expanding Your Open-Source Attack Surface

AI coding tools do not eliminate open-source risk. They can accelerate dependency adoption and make SBOM-based governance more important.

A Static SBOM Scan Is Not SBOM Management

Generating or scanning an SBOM once is not enough. SBOM management requires history, quality gates, vulnerability context, supplier workflows, VEX, an...

The CRA Deadline Is Not 2027. Your Evidence Problem Starts Now.

The Cyber Resilience Act is often treated as a 2027 deadline. But reporting obligations start on 11 September 2026. Companies need SBOM workflows now.

Your Supplier's SBOM Is Already Late

Supplier SBOM management is not a document problem. It is a response, quality, redaction, and incident workflow problem across every vendor you rely o...

SBOM CI/CD Automation. A Reference Architecture That Stays Accurate.

Reference CI/CD architecture for SBOMs: generate per build, validate with quality gates, store versioned inventory, and stay audit-ready.

The SBOM Supplier Request Kit

Supplier SBOM requests don’t scale via email. Use this kit: templates, SLAs, tracking, and quality gates, to stay audit-ready.

NTIA Minimum Elements vs. an SBOM That’s Actually Useful

NTIA minimum SBOM elements aren’t enough. Learn practical SBOM acceptance criteria and quality gates to make SBOMs actionable and auditable.

SBOM Lifecycle 101: Generate → Store → Validate → Share → Monitor

SBOM lifecycle 101: generate, store, validate, share & monitor. Learn common failure points and how to build an audit-ready SBOM program.

Free Tools

Explore your software supply chain

Analyze an SBOM for free or talk to our team about managing software supply chain data at scale.

Analyze an SBOM Free Book a Live Demo