Anchore

Open-source Syft/Grype plus enterprise SBOM management for containers and the pipeline that builds them.

Proof of life. Published the 2025 Anchore supply-chain blog series, December 2025

Anchore's open-source scanners (Syft, Grype) are how a lot of teams generate SBOMs; Enterprise is the policy and compliance layer on top. That is container and pipeline supply chain, not another SaaS SCA login. The 2025 research series is them still publishing as an independent SBOM company while the category consolidates.

Category: Software supply chain
Headquarters: Santa Barbara, USA
Country: USA
Founded: 2016
Funding stage: Series B
Total funding: n/a
Website: https://anchore.com