OPSWAT Software Bill of Materials (SBOM) is an analysis engine and automated component inventory tool within the OPSWAT MetaDefender platform. It analyzes source code, containers, open-source software (OSS), and third-party dependencies to generate a detailed component inventory. The system tracks nested dependencies within large codebases and micro-services architectures to provide transparency into the software supply chain.
To identify risks, the engine cross-references software components against a database of known vulnerabilities and evaluates them for licensing issues. Its technical capabilities include identifying and categorizing vulnerabilities by severity, validating open-source license compliance, and issuing processing verdicts, including the configured blocking of components. The system supports more than ten programming languages and standardizes output using formats like SPDX and CycloneDX. A REST API enables programmatic access to generate, export, and manage inventories for governance, risk, and compliance reporting.
