Glossary, FAQ and known issues
Every acronym defined, the questions new users ask, and the quirks seen in the demo.
Glossary
| Term | Meaning |
|---|---|
| SBOM | Software Bill of Materials: packages, libraries and their dependencies |
| CBOM | Cryptographic BOM: algorithms, keys, certificates and protocols |
| QBOM | Quantum BOM: quantum-risk rating derived from the CBOM |
| HBOM | Hardware BOM: CPU, memory, storage, network, firmware |
| AIBOM | AI/ML BOM: models, datasets, pipelines and AI libraries |
| VEX | Vulnerability Exploitability eXchange: whether a CVE actually affects a product |
| CycloneDX / SPDX | The two standard BOM file formats the platform reads and writes |
| PURL | Package URL: a standard ID for a package, e.g. pkg:npm/... |
| CVE / CVSS | A published vulnerability ID / its 0-10 severity score |
| EPSS | Probability a CVE is exploited in the next 30 days |
| CISA KEV | CISA's catalogue of vulnerabilities known to be exploited in the wild |
| IXB ID | IntelliXBOM's internal component identifier |
| Run | One scan execution on an asset; numbered #1, #2, ... |
| BOM Drift | Change in a BOM between two runs |
Known issues in the demo
Observed in the demo environment as of 27 October 2026. These are environment notes, not platform defects, and are listed so new users know what to expect:
- Opening a deep link directly (for example /assets typed in the address bar) can time out on a redirect; navigating with the sidebar works.
- The Scanned Assets vulnerability page shows 0 and Loading for a few seconds before data appears, so wait for the tiles to fill.
- In BOM Comparison, machine names can list with empty brackets where the IP is expected.
- Several binary uploads can show Dispatch failed in BOM Manager › Binaries.
- Some CycloneDX files from recent runs can remain Pending while enrichment finishes.
- An uploaded AIBOM source can show No components found while the Dashboard still reports models from scans.
Frequently asked questions
Why is a machine “Non Reachable”?
The scanner could not open SSH to it. Check the IP, port, credentials and any firewall, then use Check connection.
Why are some BOM files “Pending”?
The file exists but enrichment or report generation has not finished. Completed files offer a Report download.
Why is AIBOM greyed out for an asset?
Add at least one AIBOM target on the asset's Settings tab first.
Can I analyse software I don't run on a machine?
Yes. Upload its BOM or binary in BOM Manager under a Repository.
Does BOM Inspector change my BOM?
No. It is read-only scoring and never re-scans an asset or edits the BOM.
Who can generate CI tokens?
Admins, plus users an admin has given token access.
See it on your own stack.Register an asset, run a scan and read your first BOM in minutes.
Request a Demo