SBOM Guide

About us

The SBOM Guide is a knowledge site about SBOMs (Software Bill of Materials) in Swedish and English. It explains what an SBOM is, how it is used in vulnerability management and what regulations such as the CRA, NIS2 and DORA require.

The site is run by Bytesafe, made by Bitfront AB. Bitfront is a Swedish company in Stockholm that has built software supply chain security tools since 2018.

We started sbom.se in 2025 to collect information about SBOMs in Swedish. We have also developed the Scale SBOM framework, with support from NCC-SE and MCF. It describes how organisations can work with SBOM, VEX and VDR in practice, including to meet the requirements of the CRA.

Questions, or found something that is wrong? Contact us.

Who we are

Products in the Bytesafe platform

Bytesafe is the Bitfront platform for software supply chain security. It consists of three products.

Dependency Firewall
A firewall for the packages used in the applications you develop.
SBOM Observer
Keeps an SBOM for every release you build or buy, and shows which vulnerabilities and licence issues affect it.
Trust Repository
Collects SBOMs, VEX and support dates from your suppliers, and publishes your own to customers on a Trust Portal.