SBOMApp

Spec sheet

Purpose

SBOM App helps enterprises generate, analyze, govern, remediate, and securely share software bills of materials across the software development lifecycle.Read 2 Oct 2026 · sbomapp.com

Integrations

The site lists GitHub, GitLab, Bitbucket, Jenkins, REST API, and an AI-native MCP among its supported integrations and workflows.Read 2 Oct 2026 · sbomapp.com

Security

The site says SBOM App offers secure sharing with role-based access and end-to-end encryption, plus built-in SSO and audit logs.Read 2 Oct 2026 · sbomapp.com

Support

Pricing is customized to support and service requirements, with standard support, priority support, onboarding, and dedicated assistance listed as options.Read 2 Oct 2026 · sbomapp.com

Company

SBOM App is a product of IARM Information Security.Read 2 Oct 2026 · sbomapp.com

AI code insight

Its AI Code Insight feature identifies dependencies, vulnerabilities, licenses, and risks in AI-assisted development workflows, including through a VS Code MCP server.Read 2 Oct 2026 · sbomapp.com

Air-gapped deployment

The Air-Gapped Edition is described as deployable on premises in Kubernetes, bare metal, or a virtual machine with zero outbound connectivity.Read 2 Oct 2026 · sbomapp.com

Analysis

The product can generate SBOMs from source, containers, and binaries, map direct and transitive dependencies, scan for CVEs, manage licenses, and detect build drift.Read 2 Oct 2026 · sbomapp.com

Data handling

For the MCP product, the company says it does not store source code, SBOMs, dependencies, or project data, and uses token-based access and HTTPS communication.Read 2 Oct 2026 · sbomapp.com

Governance

SBOM App Core provides role-based access control, encrypted access-controlled report links, and policy-as-code validation across builds.Read 2 Oct 2026 · sbomapp.com

Open-source data

The product describes integration with the GitHub API, ClearlyDefined, and open-source metadata sources for license visibility and end-of-life detection.Read 2 Oct 2026 · sbomapp.com

Release options

The site lists on-premises, SaaS, AWS and Azure marketplace, and MCP server deployment models.Read 2 Oct 2026 · sbomapp.com

SBOM formats

It supports SBOM generation in SPDX 3.0 and CycloneDX 1.7 formats.Read 2 Oct 2026 · sbomapp.com

Who it is for

The company describes SBOM App as built for DevSecOps teams and says its air-gapped edition is intended for defense, government, and regulated healthcare.Read 2 Oct 2026 · sbomapp.com

Plans and prices

Every SBOMApp plan and price →

Where Specifiction places it

• SBOM Management Software#17 of 227.2