- Home
- SBOM Management Software
- Interlynk
Interlynk
Menlo Park, California, United States
What it is
Interlynk manages software bills of materials (SBOMs) for regulated software and devices. It generates, ingests, enriches, monitors, and shares SBOMs, alongside open-source risk management and supplier monitoring. For embedded C and C++ firmware, its lynkctl generator supports IAR, GCC, or CMake builds. Teams can monitor components for newly disclosed vulnerabilities and use VEX dispositions to filter findings that do not apply. Open-source risk information includes license obligations, known vulnerabilities, and component maintenance status. Components are matched against NVD, GitHub Security Advisories, and OSV, then enriched with EPSS, CISA KEV, and CWE. Suppliers can upload CycloneDX or SPDX SBOMs through secure links without an Interlynk account; links last 24 hours and renew when clicked after expiry. The platform names GitHub, GitLab, Jira, and Slack integrations, supports SSO setup, and provides a GraphQL API. Its free Community Tier includes API access and alerts for policy failures and new vulnerability disclosures. Interlynk says it supports work under FDA 524B, EU CRA, NIS2, DORA, and PCI DSS 4.0.
For and against
For
- Free Community Tier has no per-seat or per-SBOM fees.
- Supports embedded C/C++ SBOM generation.
- Supplier links accept uploads without an Interlynk account.
- Includes vulnerability and policy-failure alerts.
- GraphQL API supports integrations and workflow automation.
Against
- Supplier upload links are valid for 24 hours unless renewed by a click.
- The listed deployment model is cloud.
The verdict
Interlynk covers SBOM generation, supplier intake, component risk monitoring, and sharing in one platform. Its free Community Tier includes API access and alerts, while supplier links have a stated validity period.
Who it suits
Interlynk is intended for security, engineering, and compliance teams managing software components and SBOM workflows. Its stated audience includes regulated companies in medical devices, industrial and energy, and financial services.
Plans and prices
Community Tier
Forever free · no per-seat fees · no per-SBOM metering
Read 30 Sep 2026 · interlynk.io
On the record
- API
- Interlynk provides a GraphQL API for integrations, data retrieval and ingestion, and workflow automation.docs.interlynk.io · read 30 Sep 2026
- Community tier capabilities
- The Community Tier includes API access and alerts for policy failures and new vulnerability disclosures through Slack, Microsoft Teams, webhooks, or email.interlynk.io · read 30 Sep 2026
- Company history and headquarters
- Interlynk says Surendra Pathak and Ritesh Noronha started the company in 2022 and that it is headquartered in Menlo Park, California.interlynk.io · read 30 Sep 2026
- Embedded generation
- Its lynkctl generator supports IAR, GCC, or CMake builds for embedded C/C++ firmware.interlynk.io · read 30 Sep 2026
- Integrations
- The getting-started guide names GitHub, GitLab, Jira, and Slack integrations, and says teams can set up SSO.docs.interlynk.io · read 30 Sep 2026
- Open-source risks
- Open-source management covers license obligations, known vulnerabilities, and component maintenance status.interlynk.io · read 30 Sep 2026
- Open-source tools
- Interlynk's toolkit is free, Apache-2.0 licensed, and includes CLI tools for SBOM work.interlynk.io · read 30 Sep 2026
- Regulatory use
- Interlynk says it supports teams shipping under FDA 524B, EU CRA, NIS2, DORA, and PCI DSS 4.0.interlynk.io · read 30 Sep 2026
- SBOM lifecycle
- The platform automates SBOM management, open-source risk management, supplier monitoring, and embedded C/C++ SBOM generation.interlynk.io · read 30 Sep 2026
- Supplier workflow
- Suppliers can upload CycloneDX or SPDX SBOMs through a secure link without an Interlynk account; links are valid for 24 hours and auto-renew when clicked after expiry.interlynk.io · read 30 Sep 2026
- Vulnerability data
- Components are matched against NVD, GitHub Security Advisories, and OSV, and enriched with EPSS, CISA KEV, and CWE.interlynk.io · read 30 Sep 2026
- Vulnerability monitoring
- It monitors components for newly disclosed vulnerabilities and supports VEX dispositions to help teams filter findings that do not apply.interlynk.io · read 30 Sep 2026
- What it does
- Interlynk generates, ingests, enriches, monitors, and shares software bills of materials (SBOMs) for regulated software and devices.interlynk.io · read 30 Sep 2026
- Who it is for
- Interlynk describes its platform as serving security, engineering, and compliance teams, including regulated companies in medical devices, industrial and energy, and financial services.interlynk.io · read 30 Sep 2026
