Meet FDA requirements with your FDA SBOM report

Get the Medcrypt advantage with the only FDA expert-crafted SBOM that ensures you meet FDA SBOM requirements. We also provide a suite of other reports to enable you to export exactly what you need to meet auditor requirements.

Export FDA SBOM

You can export your SBOM from your products page or from the Reports page.

1. From the components page, click Manage SBOM > Export SBOM. If you want to take advantage of our expert FDA SBOM, select the Export FDA SBOM option. From the Reports page, click the Export SBOM button for the SBOM format you need.

2. In the export panel that displays, specify your file name.

3. Select to export either your original or enriched SBOM.

4. If you select Enriched SBOM, this will display the Enriched SBOM details section. Customize the details you want (as detailed in the fields below), then click Export SBOM.

Customize your export

Your FDA SBOM contains the data in your SBOM as well as your vulnerabilities, but can also be enriched with additional CPE/PURL, license, or vulnerability remediation data. It also automatically includes any level of support or EOS/EOL data that was either in your SBOM, manually added, or automatically added via rules you created in the Rules manager.

Export as file format:

Your FDA SBOM is only available as an Excel file.

CPE/PURL source:

Your FDA SBOM includes both CPE/PURL information from your SBOM and additional data identified by Helm to enrich your SBOM. This cannot be changed.

Vulnerabilities:

Your FDA SBOM report includes all of your vulnerabilities, but you can now include CycloneDX and VEX remediation.

Review information:

You can further enrich your FDA SBOM with the review status and notes of each component.