Skip to content

Commit 0c23880

Browse files
author
Cosimo Commisso
committed
marketing site update
1 parent 724893a commit 0c23880

11 files changed

Lines changed: 393 additions & 433 deletions

File tree

‎marketing/assets/css/style.css‎

Lines changed: 139 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4290,4 +4290,142 @@ video {
42904290
--tw-border-opacity: 1;
42914291
border-color: rgb(75 85 99 / var(--tw-border-opacity));
42924292
}
4293-
}
4293+
}
4294+
4295+
/* SecureSBOM Page Styling */
4296+
.hero-section {
4297+
text-align: center;
4298+
padding: 3rem 0;
4299+
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
4300+
color: white;
4301+
margin-bottom: 2rem;
4302+
}
4303+
4304+
.hero-title {
4305+
font-size: 3rem;
4306+
margin-bottom: 1rem;
4307+
}
4308+
4309+
.hero-subtitle {
4310+
font-size: 1.25rem;
4311+
margin-bottom: 2rem;
4312+
opacity: 0.9;
4313+
}
4314+
4315+
.hero-cta {
4316+
display: flex;
4317+
gap: 1rem;
4318+
justify-content: center;
4319+
flex-wrap: wrap;
4320+
}
4321+
4322+
.features-grid, .advantages-grid, .cta-grid {
4323+
display: grid;
4324+
grid-template-columns: repeat(auto-fit, minmax(300px, 1fr));
4325+
gap: 2rem;
4326+
margin: 2rem 0;
4327+
}
4328+
4329+
.workflow-section {
4330+
background: #f8fafc;
4331+
padding: 3rem 2rem;
4332+
border-radius: 12px;
4333+
margin: 3rem 0;
4334+
}
4335+
4336+
.workflow-grid {
4337+
display: grid;
4338+
grid-template-columns: 1fr 1fr;
4339+
gap: 4rem;
4340+
margin-top: 2rem;
4341+
max-width: 1200px;
4342+
margin-left: auto;
4343+
margin-right: auto;
4344+
}
4345+
4346+
.workflow-column {
4347+
padding: 2.5rem;
4348+
background: white;
4349+
border-radius: 12px;
4350+
box-shadow: 0 4px 6px rgba(0,0,0,0.1);
4351+
min-height: 400px;
4352+
}
4353+
4354+
.workflow-column h3 {
4355+
color: #2d3748;
4356+
margin-bottom: 1.5rem;
4357+
border-bottom: 3px solid #4299e1;
4358+
padding-bottom: 0.75rem;
4359+
font-size: 1.5rem;
4360+
}
4361+
4362+
.workflow-column h4 {
4363+
color: #4a5568;
4364+
margin-top: 2rem;
4365+
margin-bottom: 1rem;
4366+
font-size: 1.2rem;
4367+
}
4368+
4369+
.workflow-column ol, .workflow-column ul {
4370+
padding-left: 1.5rem;
4371+
margin-top: 1rem;
4372+
}
4373+
4374+
.workflow-column li {
4375+
margin-bottom: 0.75rem;
4376+
line-height: 1.7;
4377+
font-size: 1rem;
4378+
}
4379+
4380+
.cta-card {
4381+
border: 1px solid #e2e8f0;
4382+
padding: 1.5rem;
4383+
border-radius: 8px;
4384+
text-align: center;
4385+
transition: transform 0.2s ease, box-shadow 0.2s ease;
4386+
}
4387+
4388+
.cta-card:hover {
4389+
transform: translateY(-2px);
4390+
box-shadow: 0 4px 12px rgba(0,0,0,0.15);
4391+
}
4392+
4393+
.cta-section {
4394+
margin: 3rem 0;
4395+
}
4396+
4397+
/* Responsive design */
4398+
@media (min-width: 1400px) {
4399+
.workflow-grid {
4400+
max-width: 1400px;
4401+
}
4402+
}
4403+
4404+
@media (max-width: 992px) {
4405+
.workflow-grid {
4406+
gap: 2rem;
4407+
max-width: 100%;
4408+
}
4409+
4410+
.workflow-column {
4411+
padding: 2rem;
4412+
}
4413+
}
4414+
4415+
/* Responsive design for mobile */
4416+
@media (max-width: 768px) {
4417+
.workflow-grid {
4418+
grid-template-columns: 1fr;
4419+
gap: 2rem;
4420+
}
4421+
4422+
.workflow-section {
4423+
padding: 2rem 1rem;
4424+
margin: 2rem 0;
4425+
}
4426+
4427+
.workflow-column {
4428+
padding: 1.5rem;
4429+
min-height: auto;
4430+
}
4431+
}

‎marketing/content/about.md‎

Lines changed: 37 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -5,26 +5,48 @@ aliases = ["about-us", "about-hugo", "contact"]
55
author = "Hugo Authors"
66
+++
77

8-
# About
8+
# About SecureSBOM by ShiftLeftCyber
99

10-
At **ShiftLeftCyber**, we specialize in managing the full **software supply chain** lifecycle including SBOM Generation, SBOM Augmentation, SBOM Enrichment, SBOM Signing, SBOM Sharing & SBOM Analysis. We believe you cannot secure what you dont know. At ShiftLeftCyber we help you Streamline Compliance & Secure your Supply Chain.
10+
SecureSBOM is the enterprise-grade solution from **ShiftLeftCyber**, designed to manage the full life cycle of **Software Bill of Materials (SBOMs)** across your software supply chain.
1111

12-
### SBOM Authoring
13-
We help you generate, augment & enrich SBOMs directelly in your CI Pipelines using industry standards like **CycloneDX** and **SPDX** to provide a detailed inventory of your software components.
12+
---
1413

15-
### SBOM Signing and Verification
16-
Ensure the authenticity and integrity of your SBOMs with our signing and verification solutions. We support methods such as **Cosign** and **JSON Signature Format (JSF)**.
14+
## What We Do
1715

18-
### Vulnerability Management
19-
Leverage SBOMs to identify and address vulnerabilities in your software supply chain. Our tailored solutions streamline your risk management and compliance processes.
16+
At **ShiftLeftCyber**, we empower organizations to:
2017

21-
### Compliance Support
22-
Stay ahead of regulations like the **EU Cyber Resilience Act**, **EO14028**, **PCI DSS 4.0** and others. We provide guidance to ensure your software meets security and transparency requirements.
18+
- **Generate, augment, and enrich SBOMs**
19+
Embedded directly into your CI/CD pipelines, using industry-standard formats like **CycloneDX** and **SPDX**—allowing a comprehensive, accurate software component inventory.
2320

24-
### Custom Solutions
25-
We deliver customized tools and workflows to suit your unique supply chain needs, empowering your team to maintain secure and traceable software practices.
21+
- **Sign and verify SBOMs**
22+
Ensure both authenticity and integrity of your SBOMs through signing and verification using tools such as **Cosign** and the **JSON Signature Format (JSF)**.
2623

27-
---
24+
- **Analyze and remediate vulnerabilities**
25+
Leverage SBOMs to pinpoint and manage software supply chain risks—enhancing vulnerability detection, response, and remediation workflows.
2826

29-
Want to learn how we can strengthen your software supply chain? [Contact us](/contactus) today
30-
27+
- **Streamline compliance**
28+
Stay ahead of evolving regulatory requirements—including the **EU Cyber Resilience Act**, **EO 14028**, **PCI DSS 4.0**, and more—with expert support and tooling that helps ensure transparency and compliance.
29+
30+
- **Deliver custom solutions**
31+
Tailored tools and workflows adapt to your environment, enabling secure, traceable, and efficient SBOM practices.
32+
33+
---
34+
35+
## Why It Matters
36+
37+
*You cannot secure what you don’t know.*
38+
39+
In a rapidly scaling software ecosystem—where third-party and open-source components are ubiquitous—visibility into your software's composition is essential. SBOMs provide that **transparency**, enabling faster vulnerability response, stronger compliance, and supply chain trust. :contentReference[oaicite:6]{index=6}
40+
41+
SecureSBOM consolidates all aspects of SBOM lifecycle management—from generation to sharing—into one unified, enterprise-ready framework.
42+
43+
---
44+
45+
## Get in Touch
46+
47+
Ready to **secure your supply chain**?
48+
[Contact us](/contactus/) to discover how SecureSBOM can elevate your SBOM strategy—and your security posture.
49+
50+
---
51+
52+
© ShiftLeftCyber 2025. All rights reserved.

‎marketing/content/blog/what_is_an_sbom_and_why_should_you_care.md‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
+++
2+
author = "jsmith"
3+
title = "What is an SBOM & Why Should You Care? 🤔💡"
4+
date = "2025-04-20"
5+
description = ""
6+
tags = [
7+
"markdown",
8+
"css",
9+
"html",
10+
]
11+
12+
series = [""]
13+
aliases = [""]
14+
15+
image = "img/thirdparty/1743601193385.jpeg"
16+
+++
17+
18+
Software today isn't built from scratch - it is assembled from open-source components, third-party libraries,
19+
and proprietary code. But do you really know what's inside the software you use or ship? 🔍💻
20+
21+
That's where a Software Bill of Materials (SBOM) comes in. 📝
22+
23+
An SBOM is like an ingredient list for software, showing all the components that make up an application.
24+
This transparency is crucial for:
25+
26+
🔐 Security - Quickly identifying vulnerabilities in software dependencies
27+
✅ Compliance - Meeting regulatory requirements
28+
⚠️ Risk Management - Understanding the supply chain to prevent hidden risks
29+
30+
While having an SBOM is a great start, it still isn't enough. The real challenge is securing it and
31+
ensuring it can be trusted. 🔒🔑
32+
33+
Is your organization using SBOMs? What challenges have you faced? Let’s discuss! 💬👇
34+
35+
36+
#CyberSecurity #SBOM #SoftwareSecurity #SupplyChainSecurity #DigitalTrust #DataIntegrity

‎marketing/content/products/_index.md‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,11 @@
11
---
2-
title: "Products"
2+
title: "Products & Services"
33
---
4+
5+
SecureSBOM
6+
7+
Offline Verification
8+
9+
CI/CD Integration & Tooling
10+
11+
Professional Services

‎marketing/content/securesbom.md‎

Lines changed: 123 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,123 @@
1+
---
2+
title: "SecureSBOM - Enterprise SBOM Signing & Verification"
3+
description: "Cryptographic signing and verification of Software Bill of Materials (SBOMs) for trusted supply chain security. Ensure authenticity, integrity, and compliance."
4+
date: 2025-08-19
5+
layout: "single"
6+
---
7+
8+
# SecureSBOM
9+
## Enterprise-Grade SBOM Signing & Verification at Scale
10+
11+
> **Trusted SBOMs. Verified Supply Chains. Zero Compromise.**
12+
13+
SecureSBOM provides **cryptographic signing and verification** of your Software Bill of Materials, ensuring **authenticity, integrity, and compliance** across your entire software lifecycle.
14+
15+
**[Request Demo](/contactus/?type=demo)** | **[Get API Access](/contactus/?type=api)** | **[Contact Sales](/contactus/?type=sales)**
16+
17+
---
18+
19+
## Why SecureSBOM?
20+
21+
### 🔒 Sign Your SBOMs
22+
**Protect your software artifacts with cryptographic proof:**
23+
- **Integrity Assurance** — Detect any tampering or modification
24+
- **Publisher Authentication** — Prove legitimate source and ownership
25+
- **Regulatory Compliance** — Meet EO 14028, NIST, and EU CRA requirements
26+
- **Audit Evidence** — Provide cryptographic proof for security reviews
27+
28+
### 🛡️ Verify SBOMs
29+
**Establish trust in your software supply chain:**
30+
- **Threat Detection** — Identify forged or compromised SBOMs early
31+
- **Automated Validation** — Scale trust verification across CI/CD pipelines
32+
- **Vendor Confidence** — Validate third-party software components
33+
- **Zero Trust Architecture** — "Don't trust, verify" every component
34+
35+
---
36+
37+
## How It Works
38+
39+
### For SBOM Producers 🔨
40+
**Transform your software releases into trusted, verifiable artifacts:**
41+
42+
1. **Generate** your SBOMs from source code, builds, or container images
43+
2. **Sign** digitally using SecureSBOM API or CLI tools
44+
3. **Distribute** signed SBOMs with releases (OCI registries, GitHub, package repos)
45+
4. **Archive** for compliance with full audit trails and metadata
46+
47+
### For SBOM Consumers 🛡️
48+
**Verify authenticity through multiple validation methods:**
49+
50+
**Online Verification ✅**
51+
- Validate against transparency logs (Sigstore Rekor)
52+
- Confirm integrity, authenticity, and issuance timestamps
53+
- Automate in CI/CD pipelines and vendor onboarding
54+
- Real-time threat intelligence integration
55+
56+
**Offline Verification 🔒**
57+
- Air-gapped and highly regulated environment support
58+
- Local validation using trusted public keys
59+
- No internet connectivity required
60+
- Perfect for classified or sensitive deployments
61+
62+
---
63+
64+
## Key Benefits
65+
66+
**⚡ Rapid Integration** — API-first design with native CI/CD support (GitHub Actions, GitLab CI, Jenkins)
67+
68+
**🔐 Zero Trust Ready** — Enforce "verify everything" across your entire software pipeline
69+
70+
**🌐 Standards Compliant** — Full support for CycloneDX, SPDX, and Sigstore ecosystems
71+
72+
**📊 Compliance Ready** — Generate audit-ready reports and evidence for regulatory requirements
73+
74+
**🏢 Enterprise Scale** — Multi-tenant architecture with role-based access control
75+
76+
**🔑 Flexible Key Management** — Support for HSMs, cloud KMS, and on-premises key stores
77+
78+
---
79+
80+
## Technical Specifications
81+
82+
**Supported SBOM Formats:**
83+
- CycloneDX (1.4+) with native signature support
84+
- SPDX (2.3+) with detached signature verification
85+
- Custom format extensions via API
86+
87+
**Integration Options:**
88+
- REST API with OpenAPI specification
89+
- Command-line interface (CLI) for local workflows
90+
- Native plugins for popular CI/CD platforms
91+
- Webhook support for real-time notifications
92+
93+
**Security Features:**
94+
- Hardware Security Module (HSM) integration
95+
- Multi-signature workflows for critical releases
96+
- Timestamping and transparency log integration
97+
- Comprehensive audit logging and compliance reporting
98+
99+
---
100+
101+
## Get Started Today
102+
103+
### 🎯 Request a Demo
104+
See SecureSBOM in action with your actual SBOMs
105+
**[Schedule Demo](/contactus/?type=demo)**
106+
107+
### 🔑 Get API Access
108+
Start integrating SBOM signing into your workflows
109+
**[Request API Key](/contactus/?type=api)**
110+
111+
### 💬 Talk to Sales
112+
Discuss enterprise features and custom solutions
113+
**[Contact Sales](/contactus/?type=sales)**
114+
115+
---
116+
117+
**Questions?** Our security experts are here to help. [Contact our team](/contactus/) to learn how SecureSBOM can transform your software supply chain security.
118+
119+
### Related Resources
120+
- 📘 [SBOM Signing Best Practices](/blog/sbom-signing-best-practices/)
121+
- 🔍 [Supply Chain Security Guide](/blog/supply-chain-security-guide/)
122+
- ⚖️ [EO 14028 Compliance Checklist](/blog/eo-14028-compliance/)
123+
- 🛠️ [CI/CD Integration Examples](/blog/cicd-sbom-integration/)

0 commit comments

Comments
 (0)