SBOMApp

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

SBOMApp is ranked #9 of 22 in SBOM management software on Inferse. It runs on API, Browser extension, Linux, macOS, Self-hosted, Web, Windows.

Compared on SBOM management software

SBOM standard support: bothsbomapp.com
Deployment model: bothsbomapp.com
Vulnerability analysis: Yessbomapp.com
License analysis: Yessbomapp.com
Policy enforcement: Yessbomapp.com
SBOM exchange: Yessbomapp.com
Release monitoring: Yessbomapp.com

Facts

Purpose: SBOM App helps enterprises generate, analyze, govern, remediate, and securely share software bills of materials across the software development lifecycle.sbomapp.com · 2 Oct 2026
SBOM formats: It supports SBOM generation in SPDX 3.0 and CycloneDX 1.7 formats.sbomapp.com · 2 Oct 2026
Analysis: The product can generate SBOMs from source, containers, and binaries, map direct and transitive dependencies, scan for CVEs, manage licenses, and detect build drift.sbomapp.com · 2 Oct 2026
Governance: SBOM App Core provides role-based access control, encrypted access-controlled report links, and policy-as-code validation across builds.sbomapp.com · 2 Oct 2026
Integrations: The site lists GitHub, GitLab, Bitbucket, Jenkins, REST API, and an AI-native MCP among its supported integrations and workflows.sbomapp.com · 2 Oct 2026
Open-source data: The product describes integration with the GitHub API, ClearlyDefined, and open-source metadata sources for license visibility and end-of-life detection.sbomapp.com · 2 Oct 2026
Air-gapped deployment: The Air-Gapped Edition is described as deployable on premises in Kubernetes, bare metal, or a virtual machine with zero outbound connectivity.sbomapp.com · 2 Oct 2026
Security: The site says SBOM App offers secure sharing with role-based access and end-to-end encryption, plus built-in SSO and audit logs.sbomapp.com · 2 Oct 2026
AI code insight: Its AI Code Insight feature identifies dependencies, vulnerabilities, licenses, and risks in AI-assisted development workflows, including through a VS Code MCP server.sbomapp.com · 2 Oct 2026
Data handling: For the MCP product, the company says it does not store source code, SBOMs, dependencies, or project data, and uses token-based access and HTTPS communication.sbomapp.com · 2 Oct 2026
Who it is for: The company describes SBOM App as built for DevSecOps teams and says its air-gapped edition is intended for defense, government, and regulated healthcare.sbomapp.com · 2 Oct 2026
Support: Pricing is customized to support and service requirements, with standard support, priority support, onboarding, and dedicated assistance listed as options.sbomapp.com · 2 Oct 2026
Company: SBOM App is a product of IARM Information Security.sbomapp.com · 2 Oct 2026
Release options: The site lists on-premises, SaaS, AWS and Azure marketplace, and MCP server deployment models.sbomapp.com · 2 Oct 2026