How This AI-Powered Medical Software Company Reduced SBOM Documentation Time by 90%

‍Pain Points

Burdensome, Labor-Intensive Manual Documentation

DevOps and Quality teams were dedicating countless hours to manual SBOM generation and software supply chain risk management for open-source software. This exhaustive effort not only drained valuable time but also exposed them to risks like overlooking vulnerabilities, developer turnover, and potential compliance audit failures. 

‍

The Ketryx Solution

‍Simplifying the Software Supply Chain

Nutrino sought a developer-centric solution to streamline and secure SDLC management and selected Ketryx to achieve the following objectives: 

• Automatic Document Generation: Ketryx seamlessly generates supplier data for SOUP and OTS, including manufacturer names and known anomaly lists, and integrates it with risk management information. Automating document generation replaced tedious manual processes, significantly increasing productivity. 
• Risk Management: Ketryx provides an intuitive platform for effective risk management that includes security and reliability assessments, simplifying FDA-required risk analysis for OTS.
• Developer and Quality Productivity: Ketryx’s automated monitoring and notification system for attempted changes in the source code saves valuable time for R&D and Quality teams, who no longer have to manually find and input vulnerabilities. 

Business Outcomes

Proactive Management of Software Vulnerabilities and SBOM 

With Ketryx, the Nutrino team quickly realized several key benefits: 

• Reduced Documentation Time: Reduced SBOM documentation time by 90%, saving valuable developer time by generating an SBOM instantly.
• Expedited Development with a Risk-Based Approach: Shortened time to market and sped up development time through risk-based SOUP, open-source software, and vulnerability management, releasing software faster and more frequently. ‍
• Increased Cybersecurity: Shifted left to address potential vulnerabilities earlier in the development process, enhancing product quality, security, and efficiency.