Building Resilient Software Supply Chains: Inside the Enhanced Qualys Software Composition Analysis

This report presents Qualys SwCA as a strategic, enterprise-grade software composition analysis solution and details new capabilities for 2025, including Software Atlas for application-to-component mapping, expanded C/C++ binary detection, smarter ticketing and ownership mapping, CycloneDX SBOM generation, runtime visibility via Cloud Agent, and large-scale component querying. Framed against rising software supply chain threats and compliance pressures, it emphasizes prioritizing exploitable, in-use components, integrating with developer workflows, and aligning OSS risk with business impact to accelerate remediation and improve resilience.