OTNOS SBOM 360

7.6easy start · #5 of 22
in SBOM Management Software

Free to practise onyes
Free trialyes
Well documentedyes
Runs where you worknot on record

Runs on api, Web.

OTNOS SBOM 360 is ranked #5 of 22 in SBOM management software on The Geeks Club. It runs on API, Web. There is a free plan. A free trial is offered.

OTNOS SBOM 360 plans and pricing

All plans

Free Free $0/forever 50 monitored assets · 1 user · 2 CSV imports/month · 1 saved CSV · max CSV 1 MB · daily monitoring · basic AI risk analysis · community support otnos.com · 1 Oct 2026

Professional Not published Custom 1,000 monitored assets · up to 50 users · 50 CSV imports/month · 25 saved CSVs · max CSV 10 MB · 10K API calls/month · hourly monitoring · 50 PCAP analyses/month · priority support otnos.com · 1 Oct 2026

Enterprise Not published Custom Custom assets and users · 100K API calls/month included · real-time monitoring · custom PCAP limits · dedicated support + SLA · advanced RBAC otnos.com · 1 Oct 2026

Compared on SBOM management software

Free plan: Yes
SBOM standard support: both
Deployment model: cloud
Vulnerability analysis: Yes
Policy enforcement: Yes
SBOM exchange: Yes
Release monitoring: Yes

Best OTNOS SBOM 360 alternatives

See all 20

Sonatype Nexus Repository 0 of 4 in the starter kit Lesson 18.0 sbomify 0 of 4 in the starter kit Lesson 27.9 Exodos Labs 0 of 4 in the starter kit Lesson 37.6 FOSSA 0 of 4 in the starter kit Lesson 47.6 ReARM 0 of 4 in the starter kit Lesson 67.6 Interlynk 0 of 4 in the starter kit Lesson 77.3

The record

Purpose: SBOM 360 ingests, analyzes, assesses, monitors and reports software products for OT manufacturers responding to the Cyber Resilience Act.
SBOM formats: The platform consumes CycloneDX and SPDX SBOMs and produces CycloneDX VEX, OpenVEX and SBOMs with embedded VEX.
GitHub connector: A read-only GitHub app maps repositories to products and updates SBOMs on default-branch pushes and nightly checks.
Vulnerability intelligence: OTNOS mirrors more than 400,000 advisories across ecosystems, synced daily and queried locally without sending component names outside the tenant.
Risk analysis: Findings show EPSS beside severity, installed versions beside fixed versions, CISA KEV status and EUVD identifiers.
VEX workflow: Users can mark findings affected, not affected, fixed or under investigation with justifications, workarounds and decision history.
CRA reporting: OTNOS drafts all 39 ENISA Single Reporting Platform fields for 24-hour, 72-hour and final Article 14 reports.
Monitoring alerts: Configurable triggers cover new affecting advisories, newly available fixes, KEV listings and rising EPSS scores, with deduplicated email digests.
Integrations: Listed integrations and data sources include GitHub, OSV, GitHub Advisories, CISA KEV, FIRST EPSS, ENISA EUVD, endoflife.date, Microsoft Power Automate, webhooks, REST API and MCP for AI agents.
Security hosting: Application and database data run in Germany, files and backups stay in EU regions, and data is encrypted in transit and at rest.
Compliance posture: OTNOS is CSA STAR Level 1 listed, GDPR-aligned with a DPA available, and operates an ISO/IEC 27001:2022 ISMS while formal certification is planned.
Audience: OTNOS says it works with OT security engineers, PSIRT and vulnerability-management teams, consultants and MSSPs across energy, manufacturing, water and building technology.
Price from: Free

Where it ranks on The Geeks Club

Best SBOM Management Software in 2026#5 of 22

Is OTNOS SBOM 360 yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote OTNOS SBOM 360

Sources

otnos.com/platform/sbom· checked 1 Oct 2026
otnos.com/security· checked 1 Oct 2026
otnos.com/about· checked 1 Oct 2026
otnos.com/pricing· checked 1 Oct 2026