AIBOM and SBOM Management
“Gain more context on the contributors, community and risk of your AI BOMs and SBOMs”
“Talk with Your BOMs”
Gain visibility into the health and risk of your AI Agentic BOMs and SBOMs across your supply chain.
Onboard your Agentic AI BOMs and SBOMs in a centralized, secure repository. Capture your vendor’s SBOM self-attestation forms, as well as ingest, store, and manage your SBOMs through a single dashboard view.
BOM Onboarding
BOM Enrichment
Identify key risk and vulnerabilities within your vendor’s SBOMs, as defined by organizations such as Cybersecurity and Infrastructure Security Agency (CISA). Enrich all your SBOMs with open source intelligence in areas such as contributor visibility, community health and the code itself.
BOM Compliance
Determine if your vendor’s SBOMs are compliant with key government minimum requirements from organizations such as the U.S. Federal Government’s National Telecommunication and Information Administration (NTIA). Assess if SBOM is acceptable with three key categories: data fields, data formats (e.g., SPDX, CycloneDX, SWID) and practices/processes.
BOM Monitoring
Through Project Hub, continuously monitor and manage all your SBOMs, receive risk alerts on known and new vulnerabilities contained within these SBOMs, receive key remediation recommendations, while assessing your SBOM performance over time through SettleTop’s SetIntel Platform.
