# Best Software Bill of Materials (SBOM) Software - Page 3 ## How Many Software Bill of Materials (SBOM) Software Products Does G2 Track? **Total Products under this Category:** 33 ### Category Stats (Aug 2026) - **Average Rating:** 4.49/5 (↑0.01 vs Jul 2026) The average rating of products in this category, based on all submitted ratings - **Top Trending Product:** Finite State (+3.17%) - Among all products in this category, Finite State recorded the largest rating increase compared to last month _Last updated: August 06, 2026_ ## How Does G2 Rank Software Bill of Materials (SBOM) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 900+ Authentic Reviews - 33+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. **Sponsored** ### Fullbay Never get behind on invoicing, scheduling or miss adding a parts charge to a customers bill again! Fullbay streamlines your shop’s processes, leading to more efficient techs and happier customers. Track preventive maintenance, submit DVIR reports, and give your clients access to authorize work and check on the status of their repair through our customer portal. Fullbay lives in the cloud, meaning you can access it from anywhere -- even while you’re on vacation. Don’t shackle yourself to the shop any longer; get Fullbay and get back to your life. Some Frequent Q/A's: In what ways can Fullbay help me increase technician efficiency? Fullbay has the capability to track tech efficiency and utilization in real time. By knowing tech efficiency, you can increase revenue per labor hour and manage your shop better. How can Fullbay help my mobile techs? Fullbay works on any device that connects to the internet. So, your mobile techs can create an estimate, create invoices, and collect payments- all from the side of the road. How can Fullbay help me manage my inventory? With Fullbay, a shop can track parts to service orders, manage returns, mark up parts, and use a vendor portal to order parts quickly. These features help shops drastically reduce inventory losses, increase revenue on parts, and minimize the time it takes to get the parts needed to complete repairs. How can Fullbay help my shop increase our level of customer service? Fullbay provides a customer portal for all of your customers. The portal allows your customers to see the progress of their repairs, their repair history, invoices and payments. This feature reduces calls to your office and offers transparency between the shop and the customers. Don't forget to check out our free tools you can use today for your shop: -VIN Decoder (fullbay.com/tools/vin/) -Shop Profit Calculator (fullbay.com/tools/roi/) -Parts Markup (fullbay.com/tools/markup/) [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=1008169&secure%5Bchosen_at%5D=2026-08-07T08%3A09%3A26Z&secure%5Bdisplayable_resource_id%5D=1003836&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=retargeted_product&secure%5Bplacement_resource_ids%5D%5B%5D=64620&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=64620&secure%5Bresource_id%5D=1008169&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fsoftware-bill-of-materials-sbom%3Fpage%3D3&secure%5Btoken%5D=6d1748e75a060f1fc543ff8dbba7800ebc7c4e059a6daa65c2d6a5f3f78eb882&secure%5Burl%5D=https%3A%2F%2Fwww.fullbay.com%2Fheavy-duty-software-demo%2F%3Futm_source%3DG2%26utm_medium%3Dppc%26utm_campaign%3Dheavydutyrepair&secure%5Burl_type%5D=custom_url) ### [Sonatype SBOM Manager](https://www.g2.com/products/sonatype-sbom-manager/reviews) Sonatype SBOM Manager helps organizations generate, centralize, and manage Software Bills of Materials (SBOMs) across their software portfolio so teams can meet compliance requirements and respond faster to supply chain risk. SBOMs are increasingly required for procurement, audits, and security programs - but collecting them from many teams and vendors, keeping them current, and turning them into actionable risk insights is hard. SBOM Manager brings SBOM creation and management together in a single place so security, compliance, and procurement teams can standardize how SBOMs are produced, stored, shared, and reviewed. Key capabilities: - Generate SBOMs for applications in widely used formats (CycloneDX and SPDX) - Import and manage SBOMs received from third-party software suppliers - Centralize SBOMs across teams and products for consistent governance and audit readiness - Support risk and compliance workflows by making SBOM data easy to access, distribute, and operationalize SBOM Manager pairs Sonatype’s component intelligence with dedicated SBOM management so organizations can strengthen their software supply chain security posture, stay ahead of evolving requirements, and reduce the effort of proving compliance. #### Who Is the Company Behind Sonatype SBOM Manager? - **Seller:** [Sonatype](https://www.g2.com/sellers/sonatype) - **Year Founded:** 2008 - **HQ Location:** Fulton, US - **Twitter:** @sonatype 10,589 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=dd965bcc74ef94929b9eb731aaa8ab372133c521cbfc49096fe776e20652458f&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F210324%2F&secure%5Burl_type%5D=linkedin_company_website) 553 employees on LinkedIn® ### [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) Veracode helps companies that innovate through software deliver secure code on time. Unlike on-premise solutions that are hard to scale and focused on finding rather than fixing, Veracode comprises a unique combination of SaaS technology and on-demand expertise that enables DevSecOps through integration with your pipeline,empower developers to fix security defects, and scales your program through best practices to achieve your desired outcomes. Veracode covers your all your AppSec needs in one solution through a combination of five analysis types available for 24 programming languages, 77 frameworks, and application types as varied as microservices, mainframe and mobile apps. **Average Rating:** 3.8/5.0 **Total Reviews:** 25 #### Who Is the Company Behind Veracode Application Security Platform? - **Seller:** [VERACODE](https://www.g2.com/sellers/veracode) - **Year Founded:** 2006 - **HQ Location:** Burlington, MA - **Twitter:** @Veracode 21,950 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=d799a3c2e821841d648bc54266ea8fb1c07039938aa9c79b60d2cf275f0dcf34&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F27845%2F&secure%5Burl_type%5D=linkedin_company_website) 500 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Information Technology and Services - **Company Size:** 69% Large, 31% Medium #### What Do G2 Reviewers Say About Veracode Application Security Platform? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **comprehensive security analysis** offered by Veracode, effectively addressing vulnerabilities and streamlining development. - Users value Veracode for its **effective vulnerability detection** , ensuring high-security standards and seamless integration into development processes. - Users appreciate the **automated scanning** feature of Veracode, which effectively identifies vulnerabilities and enhances security standards. - Users value the **effective detection capabilities** of Veracode, enabling thorough security checks and vulnerability identification. - Users value the **ease of use** of Veracode, benefiting from seamless integration and comprehensive security analysis. ##### Cons - Users find the platform to be **expensive** , with rising costs and unjustifiable investment in customer success packages. - Users face a **lack of information** regarding features and services, leading to confusion and unmet expectations. - Users express concerns about **licensing issues** , citing high costs, complex models, and unmet feature expectations. - Users report **poor customer support** , experiencing pressure from sales and challenges with feature delivery and documentation. - Users express concerns over **pricing issues** , citing increased costs, complex licensing, and pressure from sales executives. #### What Are Recent G2 Reviews of Veracode Application Security Platform? **["Streamlined Security, Effortless Integration"](https://www.g2.com/survey_responses/veracode-application-security-platform-review-11757799)** **Rating:** 5.0/5.0 stars _— Bhanu Prakash M._ [Read full review](https://www.g2.com/survey_responses/veracode-application-security-platform-review-11757799) **["Clear, Unified View of Application Capabilities"](https://www.g2.com/survey_responses/veracode-application-security-platform-review-12910910)** **Rating:** 4.5/5.0 stars _— Christopher S._ [Read full review](https://www.g2.com/survey_responses/veracode-application-security-platform-review-12910910) #### What Are G2 Users Discussing About Veracode Application Security Platform? - [What is difference between veracode and SonarQube?](https://www.g2.com/discussions/what-is-difference-between-veracode-and-sonarqube) - [What is veracode software composition analysis?](https://www.g2.com/discussions/what-is-veracode-software-composition-analysis) - [What is veracode used for?](https://www.g2.com/discussions/what-is-veracode-used-for) - [What is the veracode application security platform?](https://www.g2.com/discussions/what-is-the-veracode-application-security-platform) ### [Vigiles](https://www.g2.com/products/vigiles/reviews) Vigiles is a best-in-class vulnerability monitoring and remediation tool that combines a curated CVE database, continuous security feed based on your SBOM, powerful filtering, and easy triage tools so you don’t get blindsided by vulnerabilities. **Average Rating:** 4.2/5.0 **Total Reviews:** 6 #### Who Is the Company Behind Vigiles? - **Seller:** [Timesys](https://www.g2.com/sellers/timesys) - **Year Founded:** 1996 - **HQ Location:** Pittsburgh, US - **Twitter:** @Timesys 540 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=5e55208e74e888cc5733ffc011cda8f939829410d9548b06dd128583ee8ba8d4&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftimesys-corporation%2F&secure%5Burl_type%5D=linkedin_company_website) 52 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 83% Small, 17% Large #### What Are Recent G2 Reviews of Vigiles? **["Vigiles review"](https://www.g2.com/survey_responses/vigiles-review-8911852)** **Rating:** 4.0/5.0 stars _— Tushar T._ [Read full review](https://www.g2.com/survey_responses/vigiles-review-8911852) **["A Revolutionary Security Solution for Peace of Mind"](https://www.g2.com/survey_responses/vigiles-review-8284121)** **Rating:** 4.0/5.0 stars _— Prashant S._ [Read full review](https://www.g2.com/survey_responses/vigiles-review-8284121) - [‹ Prev‹ Prev](/categories/software-bill-of-materials-sbom?order=popular&page=2#product-list) - [1](/categories/software-bill-of-materials-sbom?order=popular#product-list) - [2](/categories/software-bill-of-materials-sbom?order=popular&page=2#product-list) - 3 - Next ›Next › Spotlight Categories [AI Sales Assistant Software](https://www.g2.com/categories/ai-sales-assistant) [Virtual Event Platforms](https://www.g2.com/categories/virtual-event-platforms) [Background Check Software](https://www.g2.com/categories/background-check) [Digital Experience Platforms (DXP)](https://www.g2.com/categories/digital-experience-platforms-dxp) [Demo Automation Software](https://www.g2.com/categories/demo-automation) Similar Categories - [Static Code Analysis](/categories/static-code-analysis) - [Container Security](/categories/container-security-tools) - [Dynamic Application Security Testing (DAST)](/categories/dynamic-application-security-testing-dast) - [Interactive Application Security Testing (IAST)](/categories/interactive-application-security-testing-iast) - [Log Analysis](/categories/log-analysis) - [Penetration Testing](/categories/penetration-testing-tools) - [Secure Code Review](/categories/secure-code-review) - [Software Composition Analysis](/categories/software-composition-analysis) - [Static Application Security Testing (SAST)](/categories/static-application-security-testing-sast) - [Vulnerability Scanner](/categories/vulnerability-scanner) - [Web Application Firewall (WAF)](/categories/web-application-firewall-waf) [Browse Software Bill of Materials (SBOM) Themes](/categories/software-bill-of-materials-sbom/themes) ![Adam Crivello](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Adam Crivello") AC Researched and written by [Adam Crivello](https://research.g2.com/insights/author/adam-crivello) Updated October 3, 2024 Software bill of materials (SBOM) solutions generate, ingest, manage, and monitor a machine-readable inventory of the components within software supply chains. The components covered include libraries, packages, modules, associated licenses, and more. Companies and developers use SBOM software to deliver and annotate comprehensive SBOMs for their software’s third party and open source components . These solutions allow users to comply with government mandates that require the provision of a minimum SBOM. Maintaining and monitoring SBOMs also helps companies perform continuous risk assessments, though vulnerability remediation is not the primary focus of such tools. [software composition analysis (SCA) tools](https://www.g2.com/categories/software-composition-analysis) scan software supply chains’ components and dependencies at the code level to identify and remediate security vulnerabilities, whereas SBOM software automates the standardized presentation of those elements for transparency, observability, and compliance. To qualify for inclusion in the Software Bill of Materials (SBOM) category, a product must: - Automatically ingest and generate SBOMs in standard formats like CycloneDX and SPDX - Continuously monitor and update SBOMs based on component versions, associated licenses, dependencies, and more - Alert users of non-compliant elements in their software supply chain - Allow users to annotate SBOMs - Facilitate compliance with government regulations Show More