# Sonatype SBOM Manager

[Sonatype SBOM Manager](/content/solutions/sbom-management/index.html) brings value across teams

- **Easy to use** - UI is easy for many teams and technical levels to extract value.
- **Become and remain compliant** - Ensure adherence to regulations and standards with automated SBOM generation and reporting.
- **Streamlined VEX workflow** - Add vulnerability details (VEX) and Vulnerability Exploitability eXchange to each SBOM.

### Ingest

Import both CycloneDX and SPDX formats using various component identifiers while retaining the original SBOMs for compliance. VEX information may be imported and automatically produced using Sonatype data.

### Analyze

Complete component intelligence across [all supported ecosystems](https://help.sonatype.com/en/analysis.html#ecosystem-support "Ecosystem Support"). SBOM-centric metrics and trends to track progress toward policy goals.

### Store

Provide original SBOM and any augmented SBOMs by application version.

### Catalog

Check whether third-party applications and libraries comply with your organization’s compliance and security policies.

### Search

Flexible search to locate components, vulnerabilities, and policy violations across your portfolio. Reduce response time to incidents by searching through your SBOM database to find any compromised components.

### Audit

Check whether third-party applications and libraries comply with your organization’s compliance and security policies. Create rules to scale and automate the VEX process.

### Continuously Monitor

Continuously monitor SBOMs for new information about components. Provide notifications/alerts based on monitoring.

### VEX Workflow

Manage a full VEX-based SBOM Release Workflow. Embed VEX information in your SBOMs to explain vulnerabilities.

### Distribute

Share or send SBOMs as PDFs and data files. Share SBOMs with your customers, regulators, and certification bodies.

## Search results

No results found.