The objective
Connect software artefacts to their components and build history.
For product security and software delivery teams.
When this work helps
- Reviewing a shipped binary or software artefact
- Reconciling component inventories with delivered software
- Assessing build provenance and delivery controls
Practical outputs
What you receive
Deliverables are agreed for your system and the objectives of the engagement.
Artefact and attack surface review
Software bill of materials (SBOM) reconciliation and provenance review
Prioritised remediation and validation plan
From scope to handover
How the engagement works
Artefact inventory
Agree the artefacts, component inventory and delivery context to review.
Analysis and verification
Analyse the artefacts and verify the available component and build evidence.
Engineering handover
Give the engineering team prioritised actions and a validation plan.
Start with your system
A clear scope comes first.
Tell us what you are working on and what needs to change. We agree the team, timeline, acceptance criteria and reporting schedule before work starts.