Bytesafe documentation

Guides and references for the products Bytesafe Dependency Firewall and SBOM Observer, with Trust Repository coming soon.

Bytesafe has three products for the software you depend on and the software you ship.

Dependency Firewall
Firewalling for packages and Docker/OCI images

Decides which open source packages and container images your developers, CI pipelines, and AI coding agents can install. Rules delay new versions and block known vulnerabilities and malware.

SBOM Observer
SBOM management and analysis

Tracks what is in the software you build and buy, and the vulnerabilities and policy violations it carries.

Trust RepositoryCOMING SOON
Supplier transparency and CRA compliance

Collects SBOMs, VEX, and end-of-life documents from your suppliers and publishes yours to your customers, per release, through a Trust Portal.

Standalone or side by side

Each product works on its own. The Dependency Firewall needs no other Bytesafe product, and SBOM Observer analyzes SBOMs from any tool, not only from builds that install through the firewall. Start with the one that matches your problem and add others later.

Side by side, they cover different points: the Dependency Firewall works at install time, between public registries and your builds. Your builds produce SBOMs, and SBOM Observer analyzes them. Trust Repository exchanges SBOMs and VEX with your suppliers and customers, and the supplier SBOMs collected there can be imported into SBOM Observer.

Public registriesnpm, PyPI, Maven, ...
Dependency FirewallFirewalling for packages and Docker/OCI images
Your suppliers
Your builds
Trust RepositorySupplier transparency and CRA compliance, coming soonSBOM ObserverSBOM management and analysis
Your customers

Get help

Questions or problems with any product: Support.

Support

Next page