Continuous component identification and SBOM
✅ Built specifically for development teams
Empower developers to confidently produce compliant code, while providing greater license visibility to the team
✅ Fully configurable and 100% open source
No proprietary algorithms, no closed binaries and definitely no corporate source code. Everything is entirely open and available.
✅ Architected for speed and velocity
‘Start left’ in the development process by performing continuous validations vs. waiting on one final audit at the end
100% Open Source Platform architecture
Shouldn’t all SCA tooling used to scan for Open Source code actually be Open Source themselves?
Open Inventorying Engine
To analyze & compare Open Source Code snippets, filers or Winnowing fingerprints
Open SBOM
Continuously generate an open SBOM. Store your SBOM in SPDX, CycloneDX or XML
Open Indexing Algorithm
Using an open algorithm called ‘winnowing’ to store OSS files, snippets & code
Open RestFUL API
Client side applications and middleware connect to the API to interact with the Inventorying Engine
Open Database Engine
Your query performance is critical, our Knowledge Base already has passed 2 trillion fingerprints
Open Webhooks & CLI
So you can simply trigger a secure and automated source code analysis with every GIT-push
‘Start left’ in the development process
Move Open Source scanning to earlier stages of development—start left
Find defects early in the development process
Enable developers to write compliant code from the start
Native support for modern DevOps toolchains
Release faster, less re-work, balance competitive pressure(s)
An ‘always on’ SBOM
A continuous snapshot of ‘live’ code. No more waiting around for an audit to finish
Continuous SBOM creation and license compliance updates
Directly actionable for any developer v.s. a small army of auditors
Frictionless SBOM communication up & down the supply chain
Fully integrated in your development process and tech-stack
An open data architecture allows for comparable results
100% Open architecture allows for easy integrations
Native support for most DevOps toolchains
Integrate with existing SCA tooling without overlap (e.g. SPDX)
Whitepaper: Standardizing Open Source Inventorying
It’s time to reinvent Software Composition Analysis (SCA) with an Open Source inventorying platform aimed at modern DevOps environments.
Ready to facilitate the next wave of Open Source adoption?
Looking for more informations? Download our OSS whitepaper.