Exodos Labs vs sbomasm
Exodos Labs
exodoslabs.comsbomasm
github.comSide by side
| Figure | Exodos Labs | sbomasm |
|---|---|---|
| Price from | $29/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 4 | 0 |
| Spec score · SBOM Management Software | 8.4 (#3) | 6.4 (#20) |
| Purpose | Exodos Labs describes its platform as a system of record, exchange, and automation layer for managing, sharing, and operationalizing SBOMs across the software supply chain. | sbomasm is a toolkit for managing SBOMs across their lifecycle, including assembly, metadata editing, sensitive-data removal, enrichment, signing, and verification. |
| Support | The Community plan includes Community Support, Team includes support unspecified by tier, Professional includes Professional Support, and Enterprise includes Dedicated Support. | The README lists Slack, live chat, email and GitHub bug reports as ways to contact the project team. |
Plans
Exodos Labs
- CommunityFree
- Team$29 a month
- Professional$1,240 a month
- EnterprisePriced on request
In their own words
Exodos Labs
Exodos Labs manages, shares, and operationalizes software bills of materials (SBOMs) across the software supply chain. It ingests SBOMs from CI/CD pipelines, APIs, and suppliers, tracks them across builds, releases, and products, and applies validation and quality gates. Scans assess vulnerabilities, FOSS license and compliance issues, component health, and geopolitical supply-chain risks. The Community plan supports CycloneDX and SPDX formats. Secure Exchange provides access controls by organization, role, purpose, or time, alongside redaction, request workflows, and audit logs. Integrations include Cloudsmith, GitHub Actions, GitLab CI, Bitbucket Pipelines, custom build systems, vulnerability scanners, SIEM platforms, and risk management systems. Deployment options listed are cloud-hosted, private, and hybrid. Community costs nothing and includes one user and one API key. Team costs $29 a month, on annual contracts billed yearly; Professional costs $1,240 a month on annual contracts billed yearly. The platform is aimed at security, compliance, and engineering teams, including organizations in regulated environments.