GUAC
7.5#2 in software supply chain security softwareFree planFree planWebAPILinuxmacOS
Visit| Fact | GUAC | NetRise Platform |
|---|---|---|
| Deployment | The setup guide starts the GUAC server using Docker Compose and lists Docker, Docker Compose, and jq as prerequisites. | NetRise describes its platform as automated and cloud-based. |
| Purpose | GUAC ingests software metadata such as SBOMs and maps relationships between software to provide supply chain security insights. | NetRise analyzes compiled code to inventory software and identify supply chain risks in software running across organizations. |
GUAC suits development, operations, and security teams, as well as Open Source Program Offices, that need to explore software dependencies across a portfolio. It is relevant to teams already working with SBOMs and able to meet its Docker-based setup prerequisites.
It suits software builders, device manufacturers, buyers, enterprise security teams, and federal cybersecurity professionals needing compiled-code analysis and supply-chain visibility.