Meet BOMnipotent
Your all-in-one supply chain security platform.
Bill of Materials
Upload and host xBOMs, component lists for your products.
Vulnerabilities
Peridocally scan for vulnerabilities, comparing your SBOMs with databases.
Advisories
Become CSAF provider in no time, informing your users in machine-readable format.
Why BOMnipotent?
Modern software is built on layers of third-party code. But do you know what’s really inside?
What’s an SBOM?
A Software Bill of Materials (SBOM) is like an ingredient list for your software. It tells you what components you’re using—and where risk might sneak in.
What’s CSAF?
The Common Security Advisory Framework (CSAF) is a global standard for sharing vulnerability info with your users—fast, reliably, and automatically.
Why Now?
Laws like the Cyber Resilience Act and NIS-2 require you to know and share what’s in your software. BOMnipotent makes it easy to comply with these regulations.
Just looking for the client?
Use it for freeCore Features
Data distribution made easy.
Upload & Host Your Data
SBOMs, vulnerabilities, CSAF docs—centralized and structured.
Control Access
Set roles and restrict permissions per product or user group.
Integrate Anywhere
CLI and API outputs work in human- or machine-readable formats.
Secure & Compliant in 4 Steps
- 1. Upload a BOM for each release.
- 2. Scan for known vulnerabilities.
- 3. Create & publish CSAF advisories.
- 4. Share data with only the right people.
Check out the Setup Guide!
Security Built In
It’s not a feature, it’s a design principle.
Zero Trust
All requests are verified, and all actions scoped.
Passwordless
Authentication via public-key cryptography, secrets do not leave the machine.
Reliable
Test-driven development in Rust, with memory-safety baked in.
For Entities of All Sizes
Because security is a team effort.
One Version for All
Flat pricing, no feature tiers, no hidden costs.
Affordable for Companies
Everything you need for the price of two pizzas a month.
Free for Everyone Else
Non-profits and other non-commercial entities pay not a penny.