Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.

Description

Find all open source software hiding in your code with FossID. Deliver complete SBOM reports with confidence for greater license compliance and security without disrupting the productivity of your developers. FossID Workbench includes a language-agnostic scanner that assures you that all open source software, down to the copy-pasted or AI-generated snippet is identified. FossID protects intellectual property (IP) and streamlines the process by using “blind scan” technology that does not require the target’s source code. Software Composition Analysis tools and expertise trusted by enterprise software teams worldwide.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

No images available

Integrations

Snyk
Anchore
Aqua
Cloudsmith
Contrast Security
Cybellum
Debricked
DefectDojo
Finite State
Google
JFrog
JSON
Jira
Mend.io
MergeBase
OWASP Threat Dragon
ServiceNow
Vdoo
XML
Xygeni

Integrations

Snyk
Anchore
Aqua
Cloudsmith
Contrast Security
Cybellum
Debricked
DefectDojo
Finite State
Google
JFrog
JSON
Jira
Mend.io
MergeBase
OWASP Threat Dragon
ServiceNow
Vdoo
XML
Xygeni

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

CycloneDX

Website

cyclonedx.org

Vendor Details

Company Name

FossID

Founded

2016

Country

Sweden

Website

fossid.com

Alternatives

Alternatives

CodeSentry Reviews

CodeSentry

CodeSecure
CodeSentry Reviews

CodeSentry

CodeSecure