Langlauf SBOM-as-a-Service
Cutting-Edge Technology for SBOM Generation Without Source Code

Which software components are actually included in your applications and products? Langlauf SBOM-as-a-Service provides transparency – even when the source code is unavailable. By analyzing compiled software artifacts, Langlauf supports the generation of Software Bills of Materials (SBOMs) and the assessment of your software supply chain. Langlauf SBOM-as-a-Service identifies software components based on the actual delivered artifacts. This makes it possible to analyze applications and libraries even when package lists, build data or source code are unavailable.

Particularly in view of the Cyber Resilience Act (CRA), Langlauf helps companies identify software components and generate the Software Bills of Materials (SBOMs) needed to support regulatory compliance.

Applications

Assess and secure software supply chains
Support security and open-source compliance
Identify licensing and potential patent risks

Which Components Are Included in Your Software or Third-Party Software?

Knowing which software components are actually included in a product is an important basis for security assessments, open-source compliance and export control. An SBOM provides structured documentation of these components and supports vulnerability management as well as regulatory documentation requirements.

Identifying these components can be challenging, particularly in multi-tier supply chains. Source code, build systems or complete dependency lists are not always available. This is where the analysis of compiled software artifacts comes into play.

SBOM Generation Without Source Code

Langlauf uses compiled software as its source of information. The analysis covers executable binary files as well as final artifacts such as containers, images or installers. Neither source code nor dependency files are generally required.

Marker-Based Detection

Detection is based on characteristic byte sequences in the data and code sections of binary files. This enables the identification of both standalone programs and embedded libraries – including challenging cases such as statically linked components.

Use Cases for Langlauf SBOM-as-a-Service

Generate SBOMs on Demand:
Create a component inventory for existing software products – even without access to the development environment.
Final Verification of In-House Software:
Check the actual delivered software for included components and potential discrepancies.
Analyze Third-Party Software:
Analyze third-party and COTS software to supplement or verify information provided by suppliers.
Identify Export-Control-Relevant Functions:
Support the examination of software for technically relevant functions as part of internal export control processes.
Assess Licensing and Patent Risks:
Identify software components as a starting point for more detailed legal and technical assessments.
Evaluate Compliance Risks in Transactions:
Gain software transparency for due diligence processes, for example in investments, mergers and acquisitions.