GUAC

Open-source tool that aggregates software supply-chain security metadata into a queryable graph.

PlatformWebfreeglobal

GUAC is an open-source tool that aggregates software supply-chain security metadata — SBOMs, attestations, and vulnerability data — into a high-fidelity, queryable graph database. It's aimed at security teams who need a unified view of relationships and risk across many software components and sources.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of GUAC - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim GUAC to unlock →

Something wrong with this listing — dead link, not a real product, wrong info?

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether GUAC (or something else) actually fits.

Try a problem