Software Composition Analysis (SCA)

Services to create a software bill of materials of your code base

Fulfilling open source license obligations requires knowing what open-source code is in your products. For each product, a vendor needs to create a software bill-of-materials (“Stückliste”). Many vendors are surprised by what they find in their products when they first take a look, and doing it properly is a lot of work.

We provide license and copyright text, source code scanning, and snippet matching services that help you create a software bill of materials. We do so using specially trained, competitively-priced personnel so that your developers can keep developing new features rather than having to identify legal debt in your code base.

We can use your or our tools.

Example report

Our clients generally prefer to remain private, but sometimes we are asked to show the commissioned work and reassure an audience about its results. For our client Ory, the zero-trust identity services company, we presented our findings at the 2021 Ory developer conference.

There is also a corresponding Youtube video (only linked to for GDPR compliance reasons).

Please contact us if you would like to learn more.