ReARM

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

ReARM is ranked #3 of 35 in release management software on Inferse. It runs on API, Self-hosted, Web. There is a free plan. A free trial is offered. Paid plans start at $75/mo.

Compared on release management software

Free plan: Yesrearmhq.com

Facts

Product: ReARM describes itself as a release governance platform that tracks product composition, security posture, shipment clearance, supporting evidence, and what actually shipped.rearmhq.com · 29 Sept 2026
SBOM/XBOM management: It organizes versioned SBOMs and XBOMs by release, component, and product, and supports cross-version dependency diffs and portfolio-wide dependency search.rearmhq.com · 29 Sept 2026
Evidence retention: The product page says it stores HBOMs, VEX, VDR, BOV, SARIF, signatures, attestations, and build metadata with releases for 10+ years.rearmhq.com · 29 Sept 2026
SBOM enrichment: Reliza BEAR automatically enriches SBOMs with metadata including supplier, copyright, and license information.rearmhq.com · 29 Sept 2026
Findings aggregation: ReARM aggregates vulnerabilities, weaknesses, policy violations, and license violations from Dependency-Track and other tools, with triage and audit across organization, product, component, or release scope.rearmhq.com · 29 Sept 2026
Release approvals: Release policies can automatically check releases, support manual and automated approvals, and record approver identity, timestamp, and evidence snapshot in an immutable audit trail.rearmhq.com · 29 Sept 2026
Integrations: The documentation lists GitHub Actions, GitLab, Azure DevOps, Jenkins, Slack, Microsoft Teams, Microsoft Sentinel, Dependency-Track, and Microsoft Azure identity provider integrations.docs.rearmhq.com · 29 Sept 2026
Transparency Exchange API: ReARM says it supports the Transparency Exchange API for distributing SBOMs and artifacts to downstream consumers.rearmhq.com · 29 Sept 2026
Self-hosting: ReARM Community Edition can be installed with Docker Compose or a Kubernetes Helm chart and is licensed under AGPL 3.0.docs.rearmhq.com · 29 Sept 2026
Dependency analysis limit: The installation documentation says ReARM can store and version BOMs without Dependency-Track, but vulnerability scanning and policy findings require Dependency-Track or imported VDR files.docs.rearmhq.com · 29 Sept 2026
Security deployment: The installation documentation says TLS is required for deployments outside localhost because login fails on a plain-HTTP page.docs.rearmhq.com · 29 Sept 2026
Supported compliance needs: The documentation says ReARM helps fulfill xBOM requirements of EU CRA, US Executive Orders 14028 and 14144, Section 524B of the FD&C Act, and India's RBI and SEBI.docs.rearmhq.com · 29 Sept 2026