Free during early access, because we’d rather have your opinion than your money.
sbomtriage works, but it’s early, and everything is free while that’s true. In return, tell us who you are and what you’re scanning, so we can come back and ask what’s missing.
Without an account
Free, with no account and no trial period.
- SBOM and lockfile scans, several files at once
- The complete ranked plan, all the evidence, and every export
- Vendor SBOM review and CVE lookup
- Reports are kept for 24 hours, and you can delete one sooner
With an account
Free during early access. In return, we ask four questions: your company, your role, what you’re scanning, and whether we may email you.
- 10 saved projects, from files or public and private repositories
- Daily monitoring, and a manual scan whenever you want
- 90 days of history, with the changes between scans
- Executive and technical reports with your name and logo
- A CRA evidence section and drafting help
- Slack alerts, with email alerts coming soon
What you’re agreeing to
- We keep your email, company, role and what you’re using sbomtriage for. We don’t keep anything else about you, and we don’t sell any of it.
- We may occasionally email you about early access, and it’ll come from a person. Reply once to unsubscribe.
- Paid plans will come later. You’ll hear about them well in advance, and there’s no card on file to charge.
- You never need any of this to scan a file. File scans work with no account at all.
What isn’t finished yet
- Slack and email alerts
- Coming soon. You can set the policy now and it’ll apply as soon as delivery is switched on. Nothing is sent yet.
- Self-hosting
- The architecture allows it, but it isn’t built. If your employer can’t send SBOMs to a hosted service, tell us and it moves up the list.
- Published source
- Not yet, so nothing here claims to be open source or to run on your own machine.