Freedom251 › SBOM Management Software
SBOM Studio
What SBOM Studio is
SBOM Studio is a web-based enterprise platform for tracking software components, their provenance, and supply chain risk over a product’s lifecycle. Teams can select projects for monitoring; component data is enriched and checked for vulnerabilities every hour. The platform accepts CycloneDX 1.2–1.7 and SPDX 2.2–3.0.1 files, and generates CycloneDX 1.6 and 1.7 and SPDX 2.3 and 3.0.1. Quality Analysis flags incomplete or problematic component records, while Autocorrection repairs SBOMs that may otherwise be unusable. Users can identify releases containing a component associated with a searched CVE, generate VEX documents, import supplier VEX, and publish VEX alongside a release SBOM. It also supports AIBOM, CBOM, and HBOM inventories, package catalog additions from sources including npm, Maven, PyPI, and GitHub, and software license analysis. The Sharing Portal provides authenticated customers configurable access to published SBOMs; permissions can be revoked and actions logged. Transparency Exchange API support is at proof-of-concept stage. Pricing is on request.
Who it suits
It is intended for enterprises and teams tracking software components and managing product supply-chain risk, including ICS, OT, medical-device, software, and government organizations. It may also suit teams that need to share published SBOMs with customers or maintain other bill-of-materials inventories.
What it does well
- Monitored projects are rechecked for vulnerabilities hourly.
- Quality Analysis flags component-data issues; Autocorrection repairs SBOMs.
- Can generate and import VEX documents.
- Supports AIBOM, CBOM, and HBOM inventories.
- Sharing permissions can be revoked and actions logged.
What to know first
- Transparency Exchange API is at proof-of-concept stage.
- Pricing is available on request.
- The product is listed for web and cloud deployment.
Getting started
- Open the SBOM Studio website
- Request a demo from Cybeats
- Contact Cybeats for pricing details
- Use the cloud web platform after access is arranged
Verdict
SBOM Studio brings component monitoring, SBOM quality repair, VEX workflows, and controlled customer sharing into one platform. Pricing is on request, and machine-to-machine Transparency Exchange API support remains at proof-of-concept stage.
Questions
What does SBOM Studio cost?
SBOM Studio is paid, with pricing available on request from Cybeats.
Which platforms does it support?
It is a cloud service available through the web.
Which SBOM formats can it handle?
It ingests CycloneDX 1.2–1.7 and SPDX 2.2–3.0.1, and generates CycloneDX 1.6 and 1.7 plus SPDX 2.3 and 3.0.1.
Can it create VEX documents?
Yes. It generates VEX on demand, imports supplier VEX documents, and can publish VEX with a Product Release SBOM.
Does it support other inventories?
Yes. AIBOM, CBOM, and HBOM inventories are supported alongside software SBOMs.
Who makes SBOM Studio?
Cybeats, founded in 2016 and headquartered in Toronto, Ontario, Canada.
Facts from SBOM Studio's own pages
- Additional inventories
- The platform supports AIBOMs, CBOMs, and HBOMs, with dedicated catalogs for cryptographic assets, hardware, and drivers. · cybeats.com, 9 Oct 2026
- API limitation
- The product page says Transparency Exchange API support for machine-to-machine exchange is at proof-of-concept stage. · cybeats.com, 9 Oct 2026
- Company founding
- A Cybeats company post says the founders started the company in 2016. · cybeats.com, 9 Oct 2026
- Company location
- Cybeats lists its Canadian location as 401 Bay Street, Suite 1600, Toronto, Ontario. · cybeats.com, 9 Oct 2026
- Data quality
- Quality Analysis flags incomplete or problematic component data, and Autocorrection repairs SBOMs that might otherwise be unusable. · cybeats.com, 9 Oct 2026
- Data repair
- Quality Analysis flags component-data issues, and Autocorrection repairs SBOMs that would otherwise be unusable. · cybeats.com, 9 Oct 2026
- Founded
- 2016 · cybeats.com, 28 Sept 2026
- Headquarters
- Toronto, Ontario, Canada · cybeats.com, 28 Sept 2026
- Integrations
- Cybeats announced a partnership through which SBOM Studio is available to Veracode customers and can be integrated into their environments. · cybeats.com, 9 Oct 2026
- Intended users
- The maker identifies ICS environments, OT equipment makers, medical device manufacturers, software teams, government agencies, and enterprises building software in-house as potential users. · cybeats.com, 9 Oct 2026
- License analysis
- The product performs software license analysis to help maintain compliance. · cybeats.com, 9 Oct 2026
- Maker pricing
- The product page links to a demo and a contact request for more details but does not state a price. · cybeats.com, 9 Oct 2026
- Monitoring
- The platform enriches component data and rechecks monitored projects for vulnerabilities every hour. · cybeats.com, 9 Oct 2026
- Other bill of materials
- SBOM Studio supports AIBOM, CBOM, and HBOM inventories alongside software SBOMs. · cybeats.com, 9 Oct 2026
- Package catalog
- Magic Link can use package links from sources including npm, Maven, PyPI, and GitHub to add package information to a catalog or software version. · cybeats.com, 9 Oct 2026
- Product purpose
- SBOM Studio is an enterprise SBOM management platform for tracking software components, their provenance, and lifecycle risk. · cybeats.com, 9 Oct 2026
- Purpose
- SBOM Studio is an enterprise SBOM management platform for tracking third-party software components and managing software supply chain risk over a product’s lifecycle. · cybeats.com, 9 Oct 2026
- Sales and support access
- The product page directs prospective customers to request a demo or contact Cybeats for more details. · cybeats.com, 9 Oct 2026
- SBOM formats
- It ingests CycloneDX 1.2–1.7 and SPDX 2.2–3.0.1, and generates CycloneDX 1.6 and 1.7 and SPDX 2.3 and 3.0.1. · cybeats.com, 9 Oct 2026
- SBOM sharing
- Its Sharing Portal gives authenticated customers access only to published SBOMs they are granted, with configurable permissions, revocable access, and logged actions. · cybeats.com, 9 Oct 2026
- Security certification
- Cybeats announced that it completed a SOC 2 Type II audit focused on security, availability, and confidentiality. · cybeats.com, 9 Oct 2026
- Sharing controls
- Its Sharing Portal gives authenticated customers access to published SBOMs with configurable viewing and download permissions; access can be revoked and actions are logged. · cybeats.com, 9 Oct 2026
- VEX
- SBOM Studio can generate VEX documents on demand, import supplier VEX documents, and publish VEX alongside a Product Release SBOM. · cybeats.com, 9 Oct 2026
- Vulnerability monitoring
- Users can choose projects to monitor, and Cybeats rechecks them every hour. · cybeats.com, 9 Oct 2026
Where SBOM Studio stands on Freedom251
- SBOM Management Software#20 of 22
- Software Composition Analysis Software#60 of 65