{"id":4504,"date":"2026-07-06T13:07:19","date_gmt":"2026-07-06T13:07:19","guid":{"rendered":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/07\/06\/insignary-closes-sbom-accuracy-gap-with-binary-level-clarity-for-regulatory-risk\/"},"modified":"2026-07-06T13:07:19","modified_gmt":"2026-07-06T13:07:19","slug":"insignary-closes-sbom-accuracy-gap-with-binary-level-clarity-for-regulatory-risk","status":"publish","type":"post","link":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/07\/06\/insignary-closes-sbom-accuracy-gap-with-binary-level-clarity-for-regulatory-risk\/","title":{"rendered":"Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk"},"content":{"rendered":"
\"\"<\/div>\n

\"\"<\/p>\n

Toronto, Canada, July 6th, 2026, CyberNewswire<\/strong><\/span><\/p>\n\n

Most software composition analysis tools read what developers declare. Insignary Clarity\u2019s patented binary-first platform analyzes what is actually built, shipped, and deployed \u2014 including the open-source components that never appear in any manifest.<\/strong><\/p>\n

<\/strong>Insignary, Inc.<\/a>, whose patented binary fingerprint technology has been cited in four Gartner research reports, today announced its recognition as a Sample Vendor for Reachability Analysis in the Gartner Hype Cycle for Secure Software Engineering, 2026<\/a>.<\/p>\n

According to Gartner: \u201cOpen-source and third-party components may contain a long list of vulnerabilities, but not all of them directly impact your code base. Reachability analysis helps in triaging the vulnerabilities based on their exploitability.\u201d*1<\/strong><\/p>\n

The urgency is clear across independent industry research. A 2024 Venafi survey of 800 security decision-makers across the U.S., U.K., Germany, and France found that 92% are concerned about AI-generated code, and 63% have considered banning it outright over security risk.*2 <\/strong>The U.S. National Vulnerability Database recorded more than 48,000 CVEs in 2025 \u2014 roughly 130 every day.<\/p>\n

AI coding assistants are accelerating the growth of unmanaged open-source dependencies. As organizations adopt these tools at scale, they face a widening challenge: understanding which open-source components enter production software, whether those components can be trusted, and how the resulting security and compliance risks are managed.<\/p>\n

The problem is structural. Most SCA tools read what developers declare \u2014 not what actually runs. AI-generated code, vendor libraries, and third-party binaries frequently bypass package managers and never appear in a manifest.<\/p>\n

\n

\u201cSBOMs are increasingly becoming a regulatory requirement around the world. However, software transparency is only as reliable as the accuracy of an SBOM itself. You cannot verify an SBOM by reading the manifest that created it. You verify an SBOM by examining the software that was actually built, shipped, and deployed. As software supply-chain regulations increasingly depend on SBOMs, the ability to validate software at the binary level becomes essential for organizations operating in regulated industries, critical infrastructure, and AI-enabled software environments.\u201d \u2014 Taek Wan Kim, President & CEO, Insignary<\/strong><\/p>\n<\/blockquote>\n

INSIGNARY CLARITY: BINARY-FIRST. AI-AWARE.<\/strong><\/p>\n

Insignary Clarity scans both source and binary to build a complete Software Bill of Materials (SBOM) for the applications teams build, the third-party components they incorporate, and the IT infrastructure that bypasses the traditional secure development lifecycle.<\/p>\n

Key capabilities include:<\/p>\n