Overview

ReversingLabs' Software Bill of Materials (SBOM) solution provides a comprehensive approach to software supply chain security. While traditional SBOMs offer a list of components, ReversingLabs goes beyond by identifying embedded risks such as malware, code tampering, exposed secrets, and more. Their Spectra Assure platform generates the SAFE Report, which categorizes risks into six critical areas: malware, tampering, secrets, hardening, vulnerabilities, and build integrity. This approach ensures that organizations not only understand what components are in their software but also the associated risks, enabling proactive mitigation strategies.

Features and Capabilities

• Comprehensive Risk Assessment: Identifies malware, tampering, suspicious behavior, and other risks in any application.
• SAFE Report: Provides a detailed analysis of first-, second-, and third-party components, mapping them to critical risk categories.
• Extended Bill of Materials (xBOM): Supports CycloneDX and SPDX formats, including ML-BOM, CBOM, and SaaSBOM, offering a holistic view of software components.
• Actionable Insights: Delivers insights that enable organizations to take immediate steps to mitigate identified risks.
• Comprehensive Coverage: Covers software, services, machine learning models, and cryptographic assets throughout the software development lifecycle.
• Enhanced Transparency: Facilitates secure and private sharing of SBOM data to build trust and collaboration among stakeholders.
• Integration with Industry Standards: Aligns with standards like OWASP CycloneDX, ensuring compatibility and standardization.