#cyclonedx

SCOUT

Deterministic firmware-to-exploit evidence engine. Drop a firmware blob, get hash-anchored findings with SARIF + CycloneDX SBOM + verified e...

Droidsaw

Pure-Rust Android decompiler and security-audit suite. DEX → Java, Hermes → JavaScript. Cross-layer taint across the React Native bridge. Cy...

Bomly CLI

Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.