Ortelius

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Ortelius is ranked #1 of 22 in SBOM management software on Inferse. It runs on API, Self-hosted, Web. There is a free plan. Paid plans start at $40/mo.

Compared on SBOM management software

Free plan: Yesortelius.io
SBOM standard support: bothortelius.io
Deployment model: bothortelius.io
Vulnerability analysis: Yesortelius.io
License analysis: Yesortelius.io
SBOM exchange: Yesortelius.io
Release monitoring: Yesortelius.io

Facts

Purpose: Ortelius connects SBOM software inventory with Helm and deployment metadata to map open-source packages and versions to deployed endpoints.ortelius.io · 30 Sept 2026
SBOM formats: It consumes SPDX and CycloneDX SBOMs and can generate an SBOM with Syft when one does not exist.ortelius.io · 30 Sept 2026
Vulnerability monitoring: Ortelius continuously evaluates inventory against OSV.dev for newly disclosed vulnerabilities.ortelius.io · 30 Sept 2026
CVE tracing: It traces a vulnerability from affected package and version through artifact, deployment and endpoint.ortelius.io · 30 Sept 2026
SaaS availability: The site offers a free SaaS version.ortelius.io · 30 Sept 2026
Compliance dashboard: Ortelius provides a post-deployment security compliance dashboard connecting project security signals, versioned SBOMs, live deployments and vulnerability detection.ortelius.io · 30 Sept 2026
OpenSSF Scorecard: It correlates OpenSSF Scorecard results with packages and versions deployed across environments.ortelius.io · 30 Sept 2026
Detection interval: Ortelius re-maps vulnerability intelligence against deployed SBOMs every ten minutes.ortelius.io · 30 Sept 2026
NIST alignment: The security dashboard describes continuous alignment with NIST 800-218 SSDF.ortelius.io · 30 Sept 2026
Governance: The project is incubating at the Continuous Delivery Foundation, part of the Linux Foundation, which legally owns the project assets.ortelius.io · 30 Sept 2026
Community support: Questions are supported through the Ortelius Discord channel and GitHub issues.ortelius.io · 30 Sept 2026
Hosted deployment: The project README identifies a hosted version at app.deployhub.com that requires no infrastructure setup.github.com · 30 Sept 2026
Self-hosting and API: The project documentation describes on-premises or self-hosted operation and REST and GraphQL API endpoints protected by JWT middleware.ortelius.io · 30 Sept 2026
GitHub integration: Ortelius provides a GitHub App integration for connecting installations and onboarding repositories.github.com · 30 Sept 2026
Onboarding limitation: GitHub onboarding imports release and deployment metadata but does not itself attach an SBOM.github.com · 30 Sept 2026
Detection speed: Ortelius maps software inventory to newly disclosed vulnerabilities within 10 minutes of reporting.ortelius.io · 1 Oct 2026
Digital twin: Ortelius uses a deployment-aware software digital twin to provide continuously updated visibility into deployed components and their security posture.ortelius.io · 1 Oct 2026
Endpoint tracking: The platform tracks where software components are deployed so teams can identify affected systems.deployhub.com · 1 Oct 2026
CI/CD integration: Ortelius uses its CLI in CI/CD pipelines to capture supply-chain data at build and deployment stages.ortelius.io · 1 Oct 2026
Vulnerability intelligence: Ortelius queries OSV.dev public APIs every 10 minutes for vulnerability checks.ortelius.io · 1 Oct 2026
Support: Ortelius OS provides community technical support, while DeployHub Enterprise includes commercial technical support.deployhub.com · 1 Oct 2026
Access controls: The free Ortelius offering has user-level access controls, while DeployHub adds group-level access controls and LDAP/Active Directory support.deployhub.com · 1 Oct 2026
Deployment options: Ortelius OS is offered as SaaS or on-premise/self-hosted software.deployhub.com · 1 Oct 2026