InfoResearch
SBOM management beyond the component list
An SBOM records software components, versions, and origins. It needs updates with deployments, evidence tracking, and a wider map of dependencies beyond code.
#Open Source Security
InfoResearch
Supply chain attacks and the need for verifiable security evidence
AI helps attackers find weak suppliers and software dependencies faster. Supply chain security needs current, verifiable evidence, controlled package intake, and visibility into changes.