Supports
OWASP Transparency Exchange API
Integrates
with your favorite tools
Trusted By
Digital Asset Management
ReARM maintains up-to-date inventory of digital assets and provides storage for Artifacts and Metadata, such as SBOMs / xBOMs, and Attestations, per each Release.
Regulatory Compliance
ReARM ensures supply chain security compliance with various regulations, including EU CRA, NIS2, DORA, US Executive Orders 14028, 14144, Section 524B of the FD&C Act, India's RBI and SEBI.
Track Vulnerabilities and Violations across your Supply Chain
ReARM integrates with OWASP Dependency-Track to present real-time view of the state of your supply chain.
Automated Versioning and Change Logs for your Releases
Choose desired versioning schema, connect to your CI and let ReARM do the rest!
Automated Bundling into Products
ReARM automatically bundles your Components into Products and supports multi-level nesting.
Approval and Lifecycle Management
ReARM Pro provides rich capabilities for managing approvals and lifecycles of your releases. Both manual and automated approvals are supported.
Pricing & Plans
Fixed predictable rates for any team
ReARM CE
- FOSS ReARM Community Edition
- Self-Hosted
- Single Organization
- Community support
- All Core SBOM/xBOM Storage & Retrieval Functionality
- Vulnerabilities and Violations via self-managed Dependency-Track Integration
ReARM Pro - Starter
- Priority Support (response within 8 hours)
- Managed Dependency-Track
- Managed Single Organization Service
- Approvals & Triggers
- Marketing Releases
- Free 90-day trial
ReARM Pro - Standard
- Premium support (24x7)
- Managed Dependency-Track
- Private Managed Service with SSO
- Approvals & Triggers
- Marketing Releases
- Support for Multi-Organization Workflow
- Free 90-day trial
ReARM Pro - Enterprise
- Premium support (24x7)
- Managed Dependency-Track
- Private Managed Service with SSO, or on‑prem deployment (air-gap ready)
- Approvals & Triggers
- Marketing Releases
- Support for Multi-Organization Workflow
- Free 90-day trial