Part of our Understanding SBOMs webinar series, Steve Springett, an OWASP Board Member and CycloneDX Core Working Group Chair, and Alan Pope of Anchore explore how CycloneDX revolutionizes software supply chain security through machine-readable attestations and advanced SBOM capabilities

As software supply chain attacks continue to rise, the need for verifiable trust in our software components has never been more critical. Building on the foundation of SBOMs, Steve discusses how CycloneDX's attestation capabilities address this challenge by enabling organizations to create cryptographically verifiable evidence of their security practices, automating traditionally manual audit workflows while maintaining accuracy and trustworthiness.

Key takeaways include:

  • Compliance Automation: Learn how to transform manual audit processes into automated workflows using CycloneDX attestations.
  • Standards Integration: Understand how CycloneDX integrates with existing security standards and frameworks.
  • Trust Verification: Discover how to implement verifiable trust in your software supply chain.
  • Future Roadmap: Get insights into upcoming CycloneDX features and capabilities.

Featured Speakers

Alan Pope

Director, Developer Relations
Anchore

Steve Springett

OWASP Board Member

Cyclone DX Core Working Group Chair