Related Products
|
||||||
About
OWASP CycloneDX is a lightweight Software Bill of Materials (SBOM) standard designed for use in application security contexts and supply chain component analysis. Strategic direction and maintenance of the specification is managed by the CycloneDX Core working group, with origins in the OWASP community. A complete and accurate inventory of all first-party and third-party components is essential for risk identification. BOMs should ideally contain all direct and transitive components and the dependency relationships between them. Adopting CycloneDX allows organizations to quickly meet these minimum requirements and mature into using more sophisticated use cases over time. CycloneDX is capable of achieving all SBOM requirements defined in the OWASP Software Component Verification Standard (SCVS).
|
About
Software Composition Analysis (SCA)
FossID Workbench enables precise identification of open source components and vulnerabilities. It integrates into software development cycles, providing license recognition, proactive security checks, and detailed compliance reporting. FossID Workbench is available across various industries and helps to ensure that organizations can confidently meet their legal, security, and operational needs in open source software management.
Comprehensive Scanning
Creates a thorough and complete software bill of materials (SBOM) that catalogs all open source in use, regardless of how it made its way into the codebase.
Detailed Reporting
Ensures distribution compliance by generating reports, notices files, and copyright statements.
Integration & Extensibility
Features custom workflows, performing administrative tasks, generating reports, and more with the API.
|
|||||
Platforms Supported
Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook
|
Platforms Supported
Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook
|
|||||
Audience
Organizations searching for a complete Software Composition Analysis solution
|
Audience
Businesses searching for an open source compliance solution that detects and identifies open source and third-party components in their codebase and their corresponding licenses and security risks.
|
|||||
Support
Phone Support
24/7 Live Support
Online
|
Support
Phone Support
24/7 Live Support
Online
|
|||||
API
Offers API
|
API
Offers API
|
|||||
Screenshots and Videos |
Screenshots and VideosNo images available
|
|||||
Pricing
No information available.
Free Version
Free Trial
|
Pricing
No information available.
Free Version
Free Trial
|
|||||
Reviews/
|
Reviews/
|
|||||
Training
Documentation
Webinars
Live Online
In Person
|
Training
Documentation
Webinars
Live Online
In Person
|
|||||
Company InformationCycloneDX
cyclonedx.org
|
Company InformationFossID
Founded: 2016
Sweden
fossid.com
|
|||||
Alternatives |
Alternatives |
|||||
|
|
|
|||||
|
|
||||||
Categories |
Categories |
|||||
Integrations
Snyk
Anchore
ArmorCode
Checkmarx
Checkov
Cloudsmith
Contrast Security
Cybeats
Endor Labs
FOSSA
|
Integrations
Snyk
Anchore
ArmorCode
Checkmarx
Checkov
Cloudsmith
Contrast Security
Cybeats
Endor Labs
FOSSA
|
|||||
|
|
|