Dependency-Track, continuous software supply chain component analysis, ready to ingest an SBOM on first boot.
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| Dependency-Track on Ubuntu 24.04 LTS | Azure | Ubuntu 24.04 | Standard | View · Guide |
Dependency-Track is the OWASP flagship platform for software supply chain component analysis. It ingests CycloneDX SBOMs, continuously tracks every component against vulnerability intelligence, and reports risk across a portfolio of projects. Security and engineering teams use it to know what is in their software and which parts have become vulnerable.
cloudimg ships Dependency-Track hardened, fully patched and preconfigured with its database, reverse proxy and web interface already wired together, with data on a dedicated disk. A unique admin credential is generated on first boot and the well known default login is verified dead before the image ships. Paired with a step by step deploy guide and backed by 24/7 support.