SBOM Monitor detects vulnerabilities in your software components before they become a risk. Continuous CVE monitoring from over 15 sources—on-premises or in the cloud.
A central dashboard for SBOM management, vulnerability monitoring, and compliance—within your infrastructure.
A central dashboard for SBOM management, vulnerability monitoring, and compliance—within your infrastructure.
SBOM Monitor goes beyond standard SBOMs—with native integrations for two worlds that other providers ignore.
Delphi projects do not generate package.json or requirements.txt files—traditional SCA tools are unable to process them. Our MSys SBOM Generator plugin for the Delphi IDE generates CycloneDX SBOMs directly from .dproj files, including BPL dependencies, GetIt packages, and third-party components.
Embedded Linux images (Yocto/OpenEmbedded, Buildroot) consist of hundreds of packages spread across multiple layers. SBOM Monitor understands the layer structure and monitors every component—from kernel modules to userspace libraries.
A central dashboard for SBOM management, vulnerability monitoring, and compliance—within your infrastructure.
Upload CycloneDX and SPDX SBOMs—via the web UI, REST API, or CI/CD pipeline. Organized by products, versions, and components.
Upload CycloneDX and SPDX SBOMs—via the web UI, REST API, or CI/CD pipeline. Organized by products, versions, and components.
Continuous monitoring from NVD, GitHub Advisories, OSV, CISA KEV, CERT-Bund, and other sources. New CVEs are automatically checked against your SBOMs.
Continuous monitoring from NVD, GitHub Advisories, OSV, CISA KEV, CERT-Bund, and other sources. New CVEs are automatically checked against your SBOMs.
Email, Microsoft Teams, Slack, or webhooks—configurable by product and severity level. No critical CVE goes unnoticed.
Email, Microsoft Teams, Slack, or webhooks—configurable by product and severity level. No critical CVE goes unnoticed.
Automatically generated reports for CRA, NIS2, and internal audits. Exportable as PDF, JSON, or in a machine-readable format in accordance with BSI TR-03183.
Automatically generated reports for CRA, NIS2, and internal audits. Exportable as PDF, JSON, or in a machine-readable format in accordance with BSI TR-03183.
Run SBOM Monitor in your own data center—as a Docker container or a Windows service. Your data never leaves your network.
Run SBOM Monitor in your own data center—as a Docker container or a Windows service. Your data never leaves your network.
Complete REST API for CI/CD integration. Automated uploads from GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
Complete REST API for CI/CD integration. Automated uploads from GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
