Platform generating SBOMs to expose software supply chain vulnerabilities.
Manifest's software and AI supply chain transparency platform generates Software Bills of Materials to expose hidden dependencies and vulnerabilities in codebases.
The platform is expanding toward AI Bills of Materials for AI systems and serves defense and critical infrastructure customers including the United States Air Force and the Department of Homeland Security.
| Attribute | SBOM & Supply Chain Transparency Platform | SBOM & Container Security Platform | Snyk Code | |
|---|---|---|---|---|
| Provider | |  |  | |
| Founded | 2022 | 2016 | 2015 | |
| Sells To | Enterprise | Enterprise | Enterprise | |
| Pricing Model | Recurring, Software | Recurring, Software | Recurring, Software | |
| Ownership | Venture-backed | Venture-backed | Venture-backed |
Provider
Founded 2022
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
Provider
Founded 2016
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
Provider
Founded 2015
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
DevOps platform for artifact management, SBOM generation, vulnerability scanning, and software supply-chain security.
SonarQube add-on extending SAST and SCA to detect CVEs, malicious packages, and license risks with SBOM export.
AI-assisted supplier compliance SaaS for document collection, CSR, and Sapin II controls.
AI platform that maps verified cloud and application attack paths to sensitive data.
Developer-security platform that finds and fixes vulnerabilities in open-source dependencies, containers, and infrastructure as code.
AI compliance platform that automates HARA, TARA, and FMEA generation for physical product certification.
Multi-disciplinary security reviews across application, blockchain, cryptography, and AI systems.
Vortexify for Supply Chain connects operations data and ships working apps for inventory, logistics, and demand in minutes.
Managed open-core CNAPP mapping cloud and on-prem assets, attack paths, and misconfigurations.
AI-assisted static application security testing that finds and helps developers fix real vulnerabilities with fewer false positives.
AI agent effectiveness layer that injects project context and verifies agent-written code in real time.
Early-access service that improves training data quality for coding LLMs to reduce bugs and security flaws.
DevOps platform for artifact management, SBOM generation, vulnerability scanning, and software supply-chain security.
SonarQube add-on extending SAST and SCA to detect CVEs, malicious packages, and license risks with SBOM export.
AI-assisted supplier compliance SaaS for document collection, CSR, and Sapin II controls.
AI platform that maps verified cloud and application attack paths to sensitive data.
Developer-security platform that finds and fixes vulnerabilities in open-source dependencies, containers, and infrastructure as code.
AI compliance platform that automates HARA, TARA, and FMEA generation for physical product certification.
Multi-disciplinary security reviews across application, blockchain, cryptography, and AI systems.
Vortexify for Supply Chain connects operations data and ships working apps for inventory, logistics, and demand in minutes.
Managed open-core CNAPP mapping cloud and on-prem assets, attack paths, and misconfigurations.
CodeQL is GitHub's semantic code analysis engine for finding security vulnerabilities in source code.
AI-assisted static application security testing that finds and helps developers fix real vulnerabilities with fewer false positives.
AI agent effectiveness layer that injects project context and verifies agent-written code in real time.
Early-access service that improves training data quality for coding LLMs to reduce bugs and security flaws.