Tag: SBOM

  • Insignary Introduces Clarity On-Demand: Pay-Per-Project SBOM Generation Without Annual Contracts

    Insignary Introduces Clarity On-Demand: Pay-Per-Project SBOM Generation Without Annual Contracts

    Toronto, Canada – July 15, 2026 – Insignary Inc., a leader in software supply chain security and binary software composition analysis (SCA), today announced the launch of Insignary Clarity On-Demand, a self-service, pay-per-project offering that provides immediate access to patented SCA and Software Bill of Materials (SBOM) generation — with no annual subscription required.

    Most traditional SCA tools rely on what software claims to contain rather than what it actually contains. Clarity On-Demand addresses this gap by analyzing compiled binaries to detect every open-source component, including those from AI-generated code, vendor libraries, and statically linked binaries that bypass package managers.

    Designed for Flexibility and Urgency

    Clarity On-Demand is built for two primary audiences:

    • Teams evaluating Insignary Clarity before committing to a full enterprise deployment.
    • Smaller organizations that need professional-grade SBOM generation and vulnerability visibility for a specific project without an ongoing subscription.

    With regulatory deadlines looming — including Canada’s Bill C-8 (Critical Cyber Systems Protection Act) and the U.S. FDA’s requirement for SBOMs in premarket submissions for connected cyber devices — organizations can no longer wait for annual procurement cycles.

    “You cannot verify an SBOM by reading the manifest that created it. You verify an SBOM by examining the software that was actually built, shipped, and deployed. Clarity On-Demand makes that level of verification accessible to any organization — from a development team preparing for its first compliance audit to an enterprise team evaluating binary SCA for the first time.” — Taek Wan Kim, President & CEO, Insignary

    What Clarity On-Demand Includes

    Each subscription provides two weeks of access for a single user and a single project. Within that window, users can:

    • Generate a complete SBOM from source code and compiled binaries
    • Receive automated license and security risk alerts
    • Identify components associated with known patent licensing risks
    • Receive alerts for known exploits tied to identified components

    Clarity On-Demand is available on a self-service, pay-per-project basis with plans based on scan volume. First-time users receive 50% off their first project. Full pricing details are available at insignary.com/clarity-on-demand.

    Why Binary-Level Analysis Matters

    The U.S. National Security Agency (NSA) specifically recommends that national security system owners “obtain SBOMs and associated vulnerability and code quality information from analysis of software binaries.” Clarity On-Demand extracts fingerprints directly from compiled binary code using Insignary’s patented technology, ensuring no component goes undetected.

    Trusted by Governments and Global Enterprises

    Insignary’s technology is already used by government organizations and global leaders across electronics, defense, financial services, automotive, manufacturing, medical devices, and other sectors. Key partners include BearingPoint (exclusive distributor in Europe), Cybertrust Japan, and TechMatrix.

    About Insignary

    Insignary Inc. is a Toronto-based cybersecurity company specializing in binary software composition analysis and software supply chain security. Its patented technology identifies open-source components, vulnerabilities, and software provenance directly from compiled binaries without requiring access to source code. For more information, visit www.insignary.com.

    Contact

    Principal Solutions Architect
    Jessica Lee
    Insignary
    jessicalee@insignary.com

    This is a paid press release published via CyberNewswire, a PR newswire syndication platform for cybersecurity companies.

  • Insignary Clarity Bridges SBOM Accuracy Gap Using Binary-Level Analysis for Regulatory Compliance

    Insignary Clarity Bridges SBOM Accuracy Gap Using Binary-Level Analysis for Regulatory Compliance

    Insignary, Inc., a Toronto-based cybersecurity company specializing in binary composition analysis, has announced its recognition as a Sample Vendor for Reachability Analysis in the Gartner Hype Cycle for Secure Software Engineering, 2026. The company’s patented binary fingerprint technology, cited in four Gartner research reports, addresses a critical gap in software supply chain security: the accuracy of Software Bills of Materials (SBOMs).

    Most software composition analysis (SCA) tools rely on what developers declare in manifests. However, AI-generated code, vendor libraries, and third-party binaries often bypass package managers entirely. Insignary Clarity, the company’s flagship platform, uses a binary-first approach to analyze what is actually built, shipped, and deployed — including hidden open-source components.

    Why SBOM Accuracy Matters

    According to Gartner: “Open-source and third-party components may contain a long list of vulnerabilities, but not all of them directly impact your code base. Reachability analysis helps in triaging the vulnerabilities based on their exploitability.”

    The urgency is underscored by industry data. A 2024 Venafi survey found that 92% of security decision-makers are concerned about AI-generated code, and 63% have considered banning it outright. Meanwhile, the U.S. National Vulnerability Database recorded over 48,000 CVEs in 2025 — roughly 130 per day.

    Taek Wan Kim, President & CEO of Insignary, stated: “SBOMs are increasingly becoming a regulatory requirement around the world. However, software transparency is only as reliable as the accuracy of an SBOM itself. You cannot verify an SBOM by reading the manifest that created it. You verify an SBOM by examining the software that was actually built, shipped, and deployed.”

    Key Capabilities of Insignary Clarity

    • Binary SCA: Identifies open-source components, vulnerabilities, and license obligations directly from compiled binaries without requiring source code or manifests.
    • AIBOM Generation: Produces an AI Bill of Materials for software containing AI-generated or AI-assisted code, covering components that bypass traditional dependency declarations.
    • Reachability Analysis: Determines which disclosed vulnerabilities actually reach executable code paths, enabling risk-based prioritization.
    • Continuous Vulnerability Alerting: Monitors stored SBOMs against updated databases and delivers automated alerts when new CVEs match deployed components, without requiring a rescan.

    Recognition and Global Compliance

    Insignary has been cited in four Gartner reports: Hype Cycle for Secure Software Engineering 2026, Hype Cycle for Application Security 2025, Scale Application Security With AI-Augmented Vulnerability Remediation 2025, and 3 Steps for Assessing an Open-Source Software Project 2025.

    The platform supports compliance with global software supply chain regulations, including:

    • U.S. Executive Order 14028 and OMB Memorandum M-26-05
    • FDA Section 524B for connected medical devices
    • Canada’s Bill C-8 Critical Cyber Systems Protection Act (effective June 2026)
    • CISA and NSA SBOM guidance, NIST SSDF, Australia’s ISM, U.S. Connected Vehicle Rule, and the EU Cyber Resilience Act

    Trusted by Governments and Enterprises

    BearingPoint, a strategic investor, serves as Insignary’s exclusive distributor across Europe. Cybertrust Japan and TechMatrix drive adoption in Japanese manufacturing. Customers include government organizations and global leaders in electronics, defense, financial services, automotive, healthcare, and other sectors.

    GARTNER and Hype Cycle are trademarks of Gartner, Inc. and/or its affiliates. Gartner does not endorse any vendor, product, or service depicted in its research publications.

    About Insignary

    Insignary Inc. is a Toronto-based cybersecurity company specializing in binary composition analysis and software supply chain security. Its patented technology helps organizations identify open-source components, vulnerabilities, and software provenance from compiled binaries. The flagship Insignary Clarity platform enables binary analysis and SCA, while Clarity AIR extends this capability to AI models and AI-generated software. More at insignary.com.