Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
☆251Oct 26, 2026Updated this week
Alternatives and similar repositories for sbom-tools
Users that are interested in sbom-tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Data for CyberSOCEval, an LLM benchmark by Meta & CrowdStrike☆25Sep 22, 2025Updated last year
- An AI-powered bug bounty framework that provides structured workspaces for conducting security engagements with AI agents☆13Mar 27, 2026Updated 7 months ago
- Vulnerability detection framework by Binarly's REsearch team☆896Aug 25, 2026Updated 2 months ago
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆33Sep 1, 2026Updated last month
- Sydr benchmark applications☆17Jul 25, 2022Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A dedicated forum for representing the perspectives of end-consumers of CVE List data.☆16Oct 8, 2026Updated 3 weeks ago
- An query language and interactive tooling to work with SBOM data.☆15Oct 7, 2024Updated 2 years ago
- Aggregate vulnerability scans from multiple container image scanners to identify discrepancies and get comprehensive exposure analysis.☆86Jul 10, 2026Updated 3 months ago
- test SSL/TLS clients how secure they are☆28May 15, 2026Updated 5 months ago
- Format agnostic SBOM tooling☆156Nov 20, 2025Updated 11 months ago
- GitHub Action to alert on security patches before the CVE drops.☆224Oct 22, 2026Updated last week
- A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.☆197Updated this week
- Open GRC skills for AI agents. By ISMS Copilot.☆53Updated this week
- cryptoptic☆19Sep 22, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AI Guided Hybrid Application Static Testing☆93Updated this week
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- Performance monitoring agent for eBPF programs☆18Sep 14, 2026Updated last month
- Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages☆401Updated this week
- Library for manipulating gdb in batch mode☆21Aug 9, 2026Updated 2 months ago
- A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.☆395Sep 17, 2026Updated last month
- A baseline configuration and guidelines for securing source code repositories, covering branch protection, access controls, secret scanni…☆10May 8, 2026Updated 5 months ago
- ☆55Jun 13, 2026Updated 4 months ago
- Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.☆93Oct 22, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A curated list of Ransomware resources☆41May 11, 2026Updated 5 months ago
- Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streaml…☆598Updated this week
- Harness fo malware analysis☆42Aug 23, 2026Updated 2 months ago
- A web based tool for working with CycloneDX BOMs☆49Feb 10, 2026Updated 8 months ago
- A vibe-coded port of wiretap☆37Apr 25, 2026Updated 6 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆504Jun 16, 2026Updated 4 months ago
- This is the GitHub repo of the OpenChain SBOM Study Group☆15Updated this week
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆311Updated this week
- Autonomous Windows POC developer from patchwatch diff reports☆161Jul 30, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Repository for on-going work as part of the SBOM for AI Tiger Team effort.☆42Jul 28, 2025Updated last year
- GRC Engineer Directory☆20Updated this week
- Privateer is a plugin-based framework for security & compliance evaluations.☆29Updated this week
- AFL++ with support for FormatFuzzer☆18May 28, 2025Updated last year
- Scaling best-practice AFLPlusPlus fuzzing campaigns made easy and more☆80May 22, 2025Updated last year
- Fuzzing Lua runtimes without pain☆16Oct 21, 2026Updated last week
- SBOM Generator☆21Updated this week