CAST SBOM Manager vs sbomasm
CAST SBOM Manager
castsoftware.comsbomasm
github.comSide by side
| Figure | CAST SBOM Manager | sbomasm |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | — |
| macOS | — | Yes |
| Linux | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · SBOM Management Software | 8.0 (#8) | 6.4 (#20) |
| Formats | The product exports SBOMs in Excel, Word, and CycloneDX formats, and imports SBOMs from multiple formats. | It supports both SPDX and CycloneDX formats. |
| Purpose | CAST SBOM Manager automatically analyzes source code and creates Software Bills of Materials (SBOMs). | sbomasm is a toolkit for managing SBOMs across their lifecycle, including assembly, metadata editing, sensitive-data removal, enrichment, signing, and verification. |
| Support | CAST’s support site offers documentation, downloads, training, a community, knowledge base articles, FAQs, and troubleshooting resources. | The README lists Slack, live chat, email and GitHub bug reports as ways to contact the project team. |
Plans
In their own words
CAST SBOM Manager
CAST SBOM Manager analyzes source code and creates Software Bills of Materials for software product owners, release managers, and compliance specialists. SBOM creation can start from application code, existing files, Git repositories, or CAST Highlight results. A dashboard presents components, vulnerabilities, licenses, obsolescence, languages, topics, and file extensions. Users can define proprietary components with custom descriptions, licenses, vulnerabilities, copyrights, and programming languages, then place components in catalogs for reuse. License tools support custom definitions and management of open-source risks, requirements, obsolescence, and copyrights. Vulnerability information includes CVEs from NIST’s NVD and advisories from GitHub and GitLab, with custom vulnerabilities also supported. SBOMs can be imported from multiple formats and exported as Excel, Word, or CycloneDX. Multiple versions can be managed, and exported contents can be tailored for different audiences. The product runs on Linux and Windows with cloud or on-premises deployment. A free download is listed at free.