KNOW WHAT YOU SHIP
SBOM management
Give every component a version, a source and a place in your product.
PRODUCT CONTEXT
CONNECTED PRODUCT · v1.3.0Smart Light X1Demo Devices Ltd.
↗Wi-Fi Modulev2.1.0 · Supplier-linked↗
Firmware v1.3.0ESP32-C3 · ESP-IDF declared↗
CycloneDX sample3 component occurrences↗
One synthetic advisory needs review
Illustrative product relationships. No real detection result.Review →
An inventory is only useful when you know where it came from.
A versioned component inventory with visible quality gaps.
- 01
Bring a CycloneDX or SPDX inventory
- 02
Review missing versions and package identities
- 03
Link the snapshot to a product release
What you can explore
A versioned component inventory with visible quality gaps.
Supported capabilities & limitations
The prototype performs bounded local JSON checks. Full schema validation and dependency coverage are planned.
PLANNED · Full production workflowRead all data boundaries