Security
What is an SBOM (software bill of materials)?
Also known as: SBOM, Software bill of materials, CycloneDX, SPDX
An SBOM (software bill of materials) is a machine-readable list of all components, libraries and versions a piece of software is built from, used to find which products are affected by a vulnerability.
Common formats are CycloneDX and SPDX. The Cyber Resilience Act requires manufacturers to draw up an SBOM for their products; matching SBOM components against security advisories and CVEs shows quickly where action is needed.
How Clateway helps
- EU Cyber Resilience Act compliance – Prepare for the EU Cyber Resilience Act: product registry, SBOM quality checks, CSAF advisory matching, threat modelling, pen test and conformity evidence.
- Vulnerability management – Scan your systems and technologies for CVEs, prioritise with EPSS and CISA KEV, track SLAs, sync Dependabot alerts and watch SaaS vendor advisories in one place.