Insignary Clarity Enhances SBOM Accuracy with Binary-Level Analysis
Insignary Clarity's new platform analyzes compiled software to ensure accurate Software Bills of Materials (SBOMs), addressing regulatory gaps and prioritizing vulnerabilities based on exploitability.
Insignary, Inc. has launched Insignary Clarity, a platform designed to tackle the persistent accuracy issues plaguing Software Bills of Materials (SBOMs). Unlike traditional Software Composition Analysis (SCA) tools that rely on declared components in manifests, Insignary Clarity employs a patented binary-first approach. This method analyzes the actual compiled software that is built, shipped, and deployed, thereby identifying all open-source components, including those that bypass standard package managers and are absent from any manifest.
The urgency for such a solution is underscored by the increasing regulatory demands for SBOMs globally. Organizations operating in regulated industries, critical infrastructure, and those leveraging AI-generated code face significant challenges in verifying the integrity and security of their software supply chains. A recent Venafi survey highlighted that 92% of security decision-makers are concerned about AI-generated code, with 63% considering outright bans due to security risks. Furthermore, the sheer volume of disclosed vulnerabilities, with over 48,000 CVEs recorded in 2025, exacerbates the problem, making it difficult to ascertain which components pose a genuine threat.
Insignary Clarity's platform offers several key capabilities to address these challenges. Its Binary SCA identifies open-source components, vulnerabilities, and license obligations directly from compiled binaries, eliminating the need for source code or manifest files. This is crucial for understanding the true composition of software, especially when dealing with third-party binaries or AI-assisted development.
A significant feature is the AI Bill of Materials (AI-BOM) generation. This capability is specifically designed to create accurate SBOMs for software that incorporates AI-generated or AI-assisted code, components that often circumvent traditional dependency tracking mechanisms. By providing a clear inventory of these elements, organizations can better manage the associated risks.
Furthermore, Insignary Clarity incorporates reachability analysis. This feature determines which disclosed vulnerabilities are actually present in executable code paths within the software. This allows security teams to move beyond simply triaging vulnerabilities based on raw CVE counts and instead prioritize them based on their actual exploitability, significantly improving risk management efficiency.
The platform also provides continuous vulnerability alerting. It monitors stored SBOMs against updated vulnerability databases and automatically alerts users when newly disclosed CVEs match deployed components, without requiring a full rescan. This proactive approach ensures that organizations remain informed about emerging threats to their software.
Insignary's technology has garnered recognition, being cited in four Gartner research reports, including the Gartner Hype Cycle for Secure Software Engineering, 2026. The company emphasizes that accurate SBOMs are foundational to managing modern software complexity and security. The platform's ability to validate software at the binary level is becoming essential as global regulations, such as the U.S. Executive Order 14028, FDA Section 524B, and Canada's Bill C-8, increasingly mandate binary-verified SBOMs.
Insignary Clarity supports compliance with various global software supply chain requirements and frameworks, including CISA and NSA SBOM guidance, NIST SSDF, and the EU Cyber Resilience Act. The company has established strategic partnerships with BearingPoint in Europe and Cybertrust Japan to drive adoption across key markets, serving governments and enterprises in sectors like electronics, defense, automotive, and medical.