- Home
- SBOM Management Software
- CAST SBOM Manager
CAST SBOM Manager
New York, New York, USA and Meudon, France
What it is
CAST SBOM Manager analyzes source code and creates Software Bills of Materials (SBOMs). SBOM creation can begin with application code, existing files, Git repositories, or CAST Highlight results. Its dashboard brings together information about components, vulnerabilities, licenses, obsolescence, languages, topics, and file extensions. Users can define proprietary components with custom metadata, then save components in catalogs for reuse across SBOMs. License tools support custom definitions and properties, alongside management of open-source license risks, requirements, obsolescence, and copyrights. Vulnerability information includes CVEs from NIST’s NVD and security advisories from GitHub and GitLab; users can also add custom vulnerabilities. The product imports SBOMs from multiple formats and exports them in Excel, Word, or CycloneDX. Users can manage multiple versions and tailor exported contents for different audiences. It supports Linux and Windows, with cloud and on-premises deployment. A free download is listed as free.
For and against
For
- Creates SBOMs from code, files, Git, or CAST Highlight.
- Tracks vulnerabilities, licenses, obsolescence, and component details.
- Supports proprietary components and reusable catalogs.
- Imports multiple formats and exports Excel, Word, or CycloneDX.
- Free download listed as free.
Against
- Supports Linux and Windows only.
- No usage limits are listed for the free download.
The verdict
CAST SBOM Manager combines SBOM creation with component, license, and vulnerability management. Its format options, version management, and cloud or on-premises deployment support varied SBOM workflows.
Who it suits
It is designed for software product owners, release managers, and compliance specialists. It may suit teams that need to examine, manage, and share SBOM information across versions.
Plans and prices
CAST SBOM Manager
Free download is stated; no usage limits listed
Read 4 Oct 2026 · castsoftware.com
On the record
- Company background
- CAST’s company overview says its founder, Vincent Delaroche, began the company after installing software at a French nuclear power plant 25 years earlier.castsoftware.com · read 4 Oct 2026
- Component catalogs
- Components can be added to catalogs for sharing and reuse across SBOMs.castsoftware.com · read 4 Oct 2026
- Formats
- The product exports SBOMs in Excel, Word, and CycloneDX formats, and imports SBOMs from multiple formats.castsoftware.com · read 4 Oct 2026
- Inputs
- SBOM creation can start from application code, existing files, Git repositories, or CAST Highlight results.castsoftware.com · read 4 Oct 2026
- Intended users
- The product is designed for software product owners, release managers, and compliance specialists.castsoftware.com · read 4 Oct 2026
- License management
- The product lets users define custom licenses and properties and manage open-source license risks, requirements, obsolescence, and copyrights.castsoftware.com · read 4 Oct 2026
- Proprietary components
- Users can define proprietary components and attach custom metadata such as descriptions, licenses, vulnerabilities, copyrights, and programming languages.castsoftware.com · read 4 Oct 2026
- Purpose
- CAST SBOM Manager automatically analyzes source code and creates Software Bills of Materials (SBOMs).castsoftware.com · read 4 Oct 2026
- SBOM insights
- Its dashboard shows information including components, vulnerabilities, licenses, obsolescence, languages, topics, and file extensions.castsoftware.com · read 4 Oct 2026
- Support
- CAST’s support site offers documentation, downloads, training, a community, knowledge base articles, FAQs, and troubleshooting resources.help.castsoftware.com · read 4 Oct 2026
- Versions and customization
- Users can manage multiple SBOM versions and customize exported SBOM contents for a target audience.castsoftware.com · read 4 Oct 2026
- Vulnerability sources
- The product displays vulnerabilities such as CVEs from NIST’s NVD and security advisories from GitHub and GitLab, and allows custom vulnerabilities.castsoftware.com · read 4 Oct 2026
