Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.

Description

The software industry is increasingly becoming a dominant force in the world. However, if not properly monitored, malicious and advanced individuals could pose a serious threat to this sector. We create open source software that resonates with developers, contributing to a more secure environment for everyone. From enhancing developers' workflows to ensuring a seamless operational workload, we provide comprehensive oversight and traceability. Vulnerabilities in the software supply chain are not a recent issue; they have long been a concern. Both open source and proprietary software have been linked to some of the most notable security breaches throughout the software's evolution. It is imperative to address these vulnerabilities to safeguard the future of technology.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Arnica Yes 
Bytesafe Yes 
Checkov Yes 
Cloudsmith Yes 
Codenotary Yes 
Contrast Security Yes 
Cybeats Yes 
Cybellum Yes 
Endor Labs Yes 
FOSSA Yes 
Finite State Yes 
GitHub Yes 
Google Yes 
Mend.io Yes 
MergeBase Yes 
OWASP Threat Dragon Yes 
ServiceNow Yes 
Snyk Yes 
XML Yes 
Xygeni Yes 

Integrations

Arnica No 
Bytesafe No 
Checkov No 
Cloudsmith No 
Codenotary No 
Contrast Security No 
Cybeats No 
Cybellum No 
Endor Labs No 
FOSSA No 
Finite State No 
GitHub No 
Google No 
Mend.io No 
MergeBase No 
OWASP Threat Dragon No 
ServiceNow No 
Snyk No 
XML No 
Xygeni No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

CycloneDX

Website

cyclonedx.org

Vendor Details

Company Name

Stacklok

Founded

2023

Country

United States

Website

www.stacklok.com

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Alternatives

Alternatives

CodeSentry Reviews

CodeSentry

CodeSecure
MCP360 Reviews

MCP360

Delta4 Infotech