ReARM

The product is a release governance platform that tracks what each release is made of, its security posture, and whether it is cleared to ship, with evidence for each decision and a record of what was actually deployed. It addresses SBOM/XBOM management, vulnerability findings aggregation, release policy enforcement, and governance of AI-generated code. It is for development, operations, and IT teams in business environments managing regulated or high-volume releases. It is delivered as SaaS with a self-hosted open-source community edition and a managed commercial edition.

Key features

• SBOM/XBOM management
• SBOM diff and search
• Findings aggregation to product level
• Release policy enforcement
• AI governance for agent-written code
• Deployment governance
• Field digital twin
• EU CRA compliance support