Overview

Manifest is a venture-backed cybersecurity company committed to developing industry-leading tools for the management of software bills of materials (SBOMs) and artificial intelligence bills of materials (AIBOMs). The prevalence of software supply chain vulnerabilities such as Log4shell, Solarwinds, and Apache Struts is growing rapidly – by some accounts 300% year over year – and mission-critical enterprises such as DOD and FCEB agencies have a mandate to secure their supply chains. Owing to federal mandates and individual agency and service requirements, SBOMs have gained considerable traction as the de facto method by which software vendors provide USG with visibility and accountability into their software supply chains. These SBOMs provide critical inventories of third party and open source components within applications. However, SBOMs require a programmatic solution to manage those artifacts and derive actionable insights. From soliciting SBOMs from vendors and generating SBOMs for internal applications to aggregating SBOMs in a unified repository, monitoring SBOMs for new and existing vulnerabilities, contextualizing with exploitability information, and facilitating alerting and secure sharing of SBOMs downstream, Manifest manages the entirety of the SBOM lifecycle. With Manifest, DOD and FCEB agencies can: