Kusari is a software supply chain security platform designed for DevSecOps teams. The platform focuses on providing visibility, risk assessment, and policy enforcement across software components, dependencies, and build pipelines. Core capabilities of the Kusari platform include: - Software Bill of Materials (SBOM) generation: Automatically produces signed SBOMs for every build, enabling audit-ready documentation of all software components. - Vulnerability prioritization: Rather than surfacing all detected vulnerabilities, Kusari applies contextual analysis (exploitability, user-facing exposure, infrastructure criticality) to surface only actionable threats, reducing alert noise. - Provenance tracking: Traces libraries, binaries, and container images back to their original sources, helping detect typosquatted packages and unverified components. - Policy enforcement: Allows teams to define and automate rules within CI/CD pipelines to block insecure or unapproved components before they reach production. - VEX (Vulnerability Exploitability eXchange) reporting and provenance attestation: Generates compliance-ready evidence packages for each software release. Kusari targets regulated industries including healthcare (medical devices), defense, utilities/operational technology, and financial services. The platform serves security, developer, DevOps, and compliance personas within software development organizations. Kusari is also a contributor to open source software supply chain security, including the GUAC (Graph for Understanding Artifact Composition) project, which it co-created. The company uses a SaaS/platform model and offers demo-based sales engagement.