SBOM generation

ActiveState provides secure, built-from-source open source components delivered through a Curated Catalog. Founded to bring secure open source languages to the enterprise, it builds 79M+ open source components from source across 12 language ecosystems, with full provenance, SBOMs, and continuous remediation. It has been securing open source since 1997 and is headquartered in Vancouver, BC, Canada.

building open source components from sourcecontinuous vulnerability remediationopen source governanceSLSA Level 3 build infrastructure

Anaconda provides a platform for AI and data science development, including the Anaconda Platform for building, securing, and running AI, Kilo (an open-source AI coding agent), Anaconda Notebooks cloud environments, and Enkrypt AI security and guardrails. The company states that 50M+ users and 95% of the Fortune 500 build on Anaconda.

AI model curationAI orchestrationAI red teamingdependency and vulnerability trackingnotebooks/cloud IDEpackage building and testingpackage signingruntime guardrails

Apona offers four security products for teams that build software, embedded systems, and SMB clients: Labrador (SAST, SCA, and supply-chain security), Penzzer (dynamic fuzzing for medical devices, IoT firmware, and CAN bus/embedded targets), Safe Intelligence (agentless EASM and dark-web credential monitoring for SMBs), and Safe Password (shared-account credential management). Products are sold through a partner channel for MSSPs, AppSec consultancies, security VARs, and GSIs.

dark-web credential monitoringdynamic fuzzingexternal attack surface management (EASM)partner/channel programshared-account credential managementsoftware composition analysis (SCA)static application security testing (SAST)supply chain security

Bold Type is a U.S.-based, ISO 13485-certified engineering firm that develops FDA-compliant medical device electronics and software. Its integrated team covers embedded firmware, wireless systems, mobile and cloud apps, electronics design, and cybersecurity, supported by medical device veterans, cybersecurity experts, and AI-assisted development. Its CyberMed division provides threat modeling, penetration testing, and post-market cybersecurity management.

antenna designBLEcellular (LTE-M, NB-IoT)Cloud Infrastructurecybersecurity engineeringelectronics designembedded software developmentFDA submission supportIEC 62304 lifecycle processesISO 13485 documentationmobile app developmentPCB designpenetration testingrapid prototypingrisk managementthreat modelingUsability engineeringWi-Fiwireless systems design

Dark Sky Technology provides software supply chain security products, including Bulletproof Trust™ and Bulletproof Code™, for SBOM generation, management, and cyber supply chain risk management. Its team has spent 25+ years protecting software systems from cybersecurity vulnerabilities and attacks, helping software companies secure code from malicious threats and untrusted code through advanced analytics on open-source packages. Headquartered in Fort Collins, Colorado.

AI LLM integration via MCPair-gapped deploymentAPI and CLI integrationopen-source package risk analyticspolicy-as-code enforcementSBOM diffingSBOM managementSBOM revision controlSBOM sharing and receivingSBOM validationSBOM verificationthreat intelligence

Deepbits Technology Inc. is a cybersecurity company of security researchers and engineers developing binary and AI analysis techniques (program analysis, virtualization, machine learning/deep learning) to solve computer and software security problems. It offers agentic binary analysis powered by LLM models and proprietary tools, and applies patented technology to expose software composition and dependencies, vulnerability discovery, program hardening, digital forensics and malware detection.

AI/LLM-based analysisbinary analysisbinary diffingdigital forensicsdisassemblymachine learning/deep learningmalware detectionprogram analysisprogram hardeningVirtualizationvulnerability discovery

Digital Charter is the operating brand of InfiNetix, Inc. d/b/a Digital Charter, a SBA 8(a) certified federal IT firm founded in 2015 and headquartered in Annapolis, MD. It engineers secure federal systems, generates compliance evidence during development, and provides DevSecOps, cloud modernization, and mission automation services to federal agencies and contractors.

ATO accelerationauthorization supportcloud migrationCloud modernizationDevSecOpsInfrastructure as Codemission automationpipeline engineeringRPASection 508 Testingsecurity controls

Finite State provides an AI-native Product Security OS for connected devices, automating security and compliance workflows grounded in real product artifacts. Its platform covers threat modeling, SBOM generation from firmware, binaries, and source code, reachability analysis, VEX, and traceable compliance reporting aligned to frameworks such as EU CRA, FDA cybersecurity guidance, and NIST. It also offers practitioner-led product security services including regulatory readiness, pentesting, and certification accelerators.

binary analysiscompliance reportingfirmware analysispentestingreachability analysisred teamingsource code analysisthreat modelingvulnerability triage

FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management. The company provides tools to scan packages, containers, SBOMs, binaries, and snippets, helping organizations reduce legal and IP risk, consolidate vulnerability management, comply with regulatory reporting, and keep software dependencies updated. FOSSA also offers fossabot, which automatically reviews dependency updates for breaking changes and code impact.

automated policy enforcementdependency scanningguided remediationLicense compliancesoftware composition analysisvulnerability management