Know what is inside every release you ship.
Sentinelleai reads your source code in many programming languages, checks dependencies and malicious packages, produces a CycloneDX software bill of materials, and checks the hardening of Linux (ELF) binaries and mobile packages. Selling in the EU? The Cyber Resilience Act asks for a machine-readable software bill of materials by December 2027.
What exactly is inside the release you ship?
Sentinelleai produces a CycloneDX 1.6 software bill of materials validated against the official schema, with per-ecosystem package URLs. Declared dependencies are matched against known vulnerabilities by version range, with the remedy stated as an exact version to pin.
Is the source code itself clean?
Semgrep rule packs kept in sync with the official registry cover many programming languages. Secrets are detected and tracked through five states, including removed from the tree but still sitting in the history.
What does the artifact you build contain?
ELF headers, symbols and strings are read to check hardening flags such as RELRO, NX, PIE, stack canaries and FORTIFY, plus risky imports and embedded credentials, without executing the binary. APK and IPA packages are read too, and their native libraries are handed to the same binary scanner.
Want to see the output first? Read a complete sample report. Open the sample report →