What is a Software Bill of Materials (SBOM)?

An SBOM is a comprehensive list of all the software components, dependencies, and metadata associated with an application. The SBOM functions as the inventory of all the building blocks that make up a software product. With it, organizations can better understand, manage, and secure their applications.

The need for SBOMs is driven by several factors that include:

  • Ensuring software transparency
  • Managing open-source software and third-party dependencies
  • Identifying and mitigating security vulnerabilities
  • Complying with legal and regulatory requirements

The Executive Order on Improving the Nation's Cybersecurity was issued by the US government in May 2021, and it highlighted the importance of SBOMs in enhancing the security of the software supply chain.

Guilherme (Gui) Alvarenga, is a Sr. Product Marketing Manager for the Cloud Security portfolio at CrowdStrike. He has over 15 years experience driving Cloud, SaaS, Network and ML solutions for companies such as Check Point, NEC and Cisco Systems. He graduated in Advertising and Marketing at the Universidade Paulista in Brazil, and pursued his MBA at San Jose State University. He studied Applied Computing at Stanford University, and specialized in Cloud Security and Threat Hunting.