Security testing tools

Open-source and commercial tools that generate, validate and assess software bills of materials, compared on what they analyse, the formats they support and whether they can check a supplier's SBOM.

Platforms that watch a shipped product for new vulnerabilities and threats, correlating its components against threat intelligence and telling the maker which devices in the field are affected.

Tools that gather public information about people, organisations and infrastructure, from the accounts behind a username or email address to leaked data and the links between them. The reconnaissance stage of a penetration test or red team starts here.

Platforms that device manufacturers use to secure connected products across their life, from SBOMs and vulnerability management to compliance evidence and monitoring in the field.