Compare the Top Software Bill of Materials (SBOM) Tools that integrate with C as of August 2025

This a list of Software Bill of Materials (SBOM) tools that integrate with C. Use the filters on the left to add additional filters for products that have integrations with C. View the products that work with C in the table below.

What are Software Bill of Materials (SBOM) Tools for C?

Software bill of materials (SBOM) tools enable developers and organizations to generate a bill of materials for their applications. A software bill of materials (SBOM) is a list of libraries, components, tools, and functions that a particular software codebase uses and is comprised of. SBOM tools give visibility into the software supply chain. Compare and read user reviews of the best Software Bill of Materials (SBOM) tools for C currently available using the table below. This list is updated regularly.

  • 1
    Kiuwan Code Security
    Security Solutions For Your DevOps Process. Automatically scan your code to identify and remediate vulnerabilities. Compliant with the most stringent security standards, such as OWASP and CWE, Kiuwan Code Security covers all important languages and integrates with leading DevOps tools. Effective static application security testing and source code analysis, with affordable solutions for teams of all sizes. Kiuwan includes a variety of essential functionality in a single platform that can be integrated directly into your internal development infrastructure. Fast Vulnerability Detection: Easy and instant setup. Start scanning and get results in just minutes. DevOps Approach To Code Security: Integrate Kiuwan with your Ci/CD/DevOps pipeline to automate your security process. Flexible Licensing Options: Plenty of options, one time scans or continuous scanning. Kiuwan also offers a Saas or On-Premise model.
  • 2
    FOSSA

    FOSSA

    FOSSA

    Scalable, end-to-end management for third-party code, license compliance, and Open Source has become the critical supplier for modern software companies, changing everything about how people think about their code. FOSSA builds the infrastructure for modern teams to be successful with open source. FOSSA's flagship product helps teams track the open source used in their code and automate license scanning and compliance. Since then, over 7,000 open source projects (Kubernetes, Webpack, Terraform, ESLint) and companies ( Uber, Ford, Zendesk, Motorola) rely on FOSSA's tools to ship software. If you are in the software industry today, you're now using code that runs FOSSA. FOSSA is a venture-funded company backed by Cosanoa Ventures, Bain Capital Ventures, etc. with affiliate angels including Marc Benioff (Salesforce), Steve Chen (YouTube), Amr Awadallah (Cloudera), Jaan Tallin (Skype), and Justin Mateen (Tinder).
    Starting Price: $230 per month
  • 3
    MergeBase

    MergeBase

    MergeBase

    With the lowest false positive software composition analysis (SCA) scanner, comprehensive software bill of materials (SBOM) engine, and patented Java Dynamic Application Hardening capability, MergeBase provides the only software supply chain security solution offering real-time DevSecOps visibility of third-party risk from development into operation covering all major languages from C/C++, .NET, JavaScript/NPM to Java.
    Starting Price: $380 per month
  • 4
    Sonatype SBOM Manager
    Sonatype SBOM Manager is a comprehensive solution for creating, managing, and monitoring Software Bills of Materials (SBOMs), ensuring compliance with global regulations and strengthening the security of your software supply chain. It supports the generation and analysis of SBOMs in CycloneDX and SPDX formats, integrating with both third-party software and internal applications. SBOM Manager automates vulnerability scanning, tracks software components, and alerts teams to security risks, making it easier to meet regulatory requirements. With advanced features like real-time monitoring, customizable reporting, and continuous security updates, SBOM Manager helps organizations proactively manage open-source risks and improve software security posture.
  • Previous
  • You're on page 1
  • Next