Meet BOMnipotent
Your all-in-one supply chain security platform.
Bill of Materials
Upload and host xBOMs, component lists for your products.
Vulnerabilities
Periodically scan for vulnerabilities, comparing your SBOMs with databases.
Advisories
Become CSAF trusted provider in no time, informing your users in machine-readable format.
Document Management in Action
Just looking for the client?
Use it for freeWhy BOMnipotent?
Modern software is built on layers of third-party code. But do you know what’s really inside?
SBOM/xBOM
A (Software) Bill of Materials (SBOM/xBOM) is like an ingredient list for your software. It tells you what components you’re using, and where risk might sneak in. BOMnipotent Server hosts your xBOMs, making it available to your users, pipeline, or surveilance authority.
CSAF
The Common Security Advisory Framework (CSAF) is a global standard for sharing vulnerability info with your users. BOMnipotent Server helps you to ensure that every vulnerability detected in your xBOM is covered by an advisory, and makes it available to whom it concerns.
Why Now?
Several laws and regulations require you to create and share an SBOM, and imply creating documents like CSAF. The Cyber Resilience Act of the European Union and the Federal Food, Drug, and Cosmetic Act of the United States are two prominent examples. The number of such regulations is quickly growing as of late, and BOMnipotent helps you to comply with all of them.
Core Features
Data distribution made easy.
Upload & Host Your Data
SBOMs, vulnerabilities, CSAF docs, centralized and structured.
Control Access
Set roles and restrict permissions per product or user group.
Integrate Anywhere
CLI and API outputs work in human- or machine-readable formats.
Secure & Compliant in 4 Steps
- 1. Upload a BOM for each release.
- 2. Scan for known vulnerabilities.
- 3. Create & publish CSAF advisories.
- 4. Share data with only the right people.
Check out the Setup Guide!
BOMnipotent DocsSecurity Built In
Not a feature, but a design principle.
Zero Trust
All requests are verified, and all actions scoped.
Passwordless
Authentication via public-key cryptography, secrets do not leave the machine.
Reliable
Test-driven development in Rust, with memory-safety baked in.
Access Management in Action
For Entities of All Sizes
Because security is a team effort.
One Version for All
Flat pricing, no feature tiers, no hidden costs.
Affordable for Companies
Everything you need for the price of two pizzas a month.
Free for Everyone Else
Non-profits and other non-commercial entities pay not a penny.