Skip to content
Language: EN
Menu

Bill of materials

Provenance

Available

Hardware and software bills of materials, and the evidence packs produced from them.

Open Provenance Contact us

Provenance records all devices the company holds, who holds them and their state. It also records the components in all releases, deduplicated by package URL across the estate. Security findings are joined to both, and whether an advisory affects us becomes a lookup. Exports are organised by control reference, and their sections state what the register does and does not evidence. All exports are recorded in a hash-chained audit log.

Who it is for. RODMENA keeps its own asset register and SBOM here. Provenance is free for personal projects, and you can ask us about commercial use.

Status
Available
Part of
Offerings
Licence
Free for personal use
Product site
provenance.rodmena.co.uk
Tags
SBOMCycloneDXSPDXVEXAsset registerFree for personal use

What it does

  • Asset register

    Devices are listed with their custodian, state, encryption status and classification, and offboarding and incident response start from this list.

  • Components, deduplicated

    Components are deduplicated by package URL across the estate. Thirty products that share a base image produce one row with thirty occurrences.

  • Control-tagged exports

    Exports are organised by control reference and state their own limits. The audit log records a digest of the bytes produced.

Documentation and access details are on the product site, provenance.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.

Screens

All 9 screens of Provenance