Trace-AI

Track software dependencies, vulnerabilities, and license risks

Website

Meet Trace-AI

Trace-AI analyzes repository dependency manifests and lock files to create a software bill of materials and track associated risks. Teams connect GitHub or GitLab repositories, inspect direct and transitive dependencies, and review vulnerability and license information in a dashboard. Risk views emphasize exploit context to help prioritize investigation.

The platform also tracks vendor-related information alongside code dependencies and exports evidence in formats including CycloneDX, SPDX, and JSON. Its ZSBOM components publish classification logic and configurable policies for inspection and adaptation. Trace-AI is useful for development and security teams that need a maintained inventory of what their software includes and a clearer basis for reviewing dependency changes.

Discussion

Tried it? Share a useful thought or ask a question.

Product details

Status
Launched
Listed

Explore related topics