About
Wind River provides software and platform solutions for mission-critical embedded and edge systems. The record describes a Yocto Project embedded Linux subscription that includes security vulnerability monitoring, long-term maintenance and support, and materials around the software bill of materials (SBOM). Wind River also offers Studio tools to create, build and integrate software for embedded and edge systems, an embedded virtualization platform to run multiple OSes on a single SoC, and a Debian-based enterprise Linux distribution for edge computing. The company describes tooling to automate testing, deploy, orchestrate and update software for embedded devices and to analyze data across networks of distributed devices and servers.
Related Vendors

Advanced Installer is a Windows installer authoring tool for installing, updating, and configuring products. The site positions the product for developers, ISVs and enterprises and highlights MSI authoring, Installer Analytics and tiered feature sets (Enterprise, Professional, Freeware). Content on the site covers Software Bill of Materials (SBOM) topics and notes that Advanced Installer “uses the Microsoft SBOM tool” to handle SBOMs from container images and filesystems. The product site also references an Application Packaging Academy and feature exploration pages. Descriptions and feature lists on the site indicate a vendor software offering focused on installer packaging with published guidance on SBOM integration.

42Crunch is the leading API Security platform that automates the testing, fixing, and protection of APIs throughout their development lifecycle. It enables enterprises to enforce API security compliance across distributed teams, providing tools for API semantic validation and data definition. The platform continuously monitors security compliance across IDE, CI/CD, and runtime, allowing teams to collaboratively manage API governance. 42Crunch empowers developers with automated tools that reduce false positives and streamline security processes, ensuring APIs are secure from design through to production. It integrates with popular development tools and can be deployed on any container orchestrator.

Timesys offers solutions for building, securing, and maintaining embedded Linux, Android, and open-source operating systems. Their services include SBOM Management, Vulnerability Monitoring, and Remediation, specifically tailored for embedded software markets. Additionally, they provide development tools that support SBOM generation. Their team also offers bespoke engineering services, test automation, and remote access infrastructure to enhance client control and security. Timesys focuses on supporting mission-critical applications with a modular approach ensuring security and compliance in software management.
