A software bill of materials (SBOM) is a machine-readable inventory of every component and version that makes up a piece of software. It includes indirect, transitive dependencies.
Software supply chain security protects the code, dependencies, build systems and pipelines that produce software. Its goal is that attackers cannot tamper with what ships to production.
A vulnerability assessment is a systematic review that identifies, ranks and reports known security weaknesses across systems. It usually combines automated scanning with analyst review and prioritisation.
Open source describes software whose source code is published under a licence that lets anyone use, study, modify and share it. Projects are often developed in public by communities of individuals and companies.
Security patch management is the ongoing process of finding, testing and applying updates that fix known flaws. It covers operating systems, libraries, applications and infrastructure.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.