Assertion Contradicted AI assessment confidence: 95% certainty 4/5 debate potential 1/5

Eric Byers: Software vendors are now regulated to supply SBOMs to US government

Eric Byers · Security Software Adolus Breaks $600k ARR, $4m Valuation · Oct 9, 2021 · at 10:04

Eric Byers, CTO of cybersecurity firm Adolus, discusses regulatory drivers accelerating enterprise software supply chain security adoption.

0:00 / 0:11exact quote · 11.0s

720p mp4 · rendered on demand · StarZero watermark

“I mean, just the dynamics of the supply chain software bill of materials market is, you know, a year ago, nobody knew what a software bill of materials is. Now people are regulated to supply them to the U S government.”

quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →

The claim, plainly

Software vendors are now legally mandated to supply software bills of materials (SBOMs) to the United States government.

a quote alone can be ambiguous, so this restates it with the references and context of the conversation around it resolved. AI-written; the tape below the player is the source.

Assessment

While Executive Order 14028 (issued in May 2021) initiated a federal process directing NIST to establish software supply chain security guidance and the FAR Council to eventually propose procurement regulations, it was an internal executive directive rather than a self-executing legal mandate on private contractors. As of October 2021, no federal statute, finalized Federal Acquisition Regulation (FAR) clause, or Office of Management and Budget (OMB) policy legally required commercial software vendors to provide Software Bills of Materials (SBOMs) to the U.S. government. Even subsequent implementations (such as OMB Memorandum M-22-18 in September 2022) instituted self-attestation requirements rather than a universal SBOM delivery mandate, and FAR rule amendments remained in proposed rulemaking into late 2023.

Executive Order 14028 (May 12, 2021) set agency timelines for future guidance and FAR rulemaking but did not directly create an enforceable contractor requirement upon issuance.
The NTIA published minimum elements for SBOMs on July 12, 2021, explicitly serving as foundational guidance rather than an active procurement regulation.
As of October 9, 2021, NIST had not yet published preliminary supply chain security guidance, OMB had not issued procurement mandates, and the FAR Council had not promulgated SBOM clauses.
OMB Memorandum M-22-18 (September 2022) mandated security self-attestations rather than universal SBOM submissions, leaving SBOM collection to agency discretion.

Checked against

[1] federalregister.gov [2] govinfo.gov [3] fossa.com [4] adolus.com [5] nist.gov [6] nist.gov [7] federalregister.gov [8] sbomgenerator.com

Executive Order 14028 "Software Bill of Materials" October 2021 "Executive Order 14028" SBOM requirement date effective FAR rule SBOM Executive Order 14028 timeline "OMB M-22-18" SBOM mandatory OR required "FAR Case" "software bill of materials" OR SBOM NIST guidance SBOM Executive Order 14028 2021 2022

assessed as of 2026-09-02

This assessment is an AI reading of a public statement, made against the cited references with the confidence shown. It can be wrong. The quote, the tape and the references are all on this page; if something is off, use report an error below. full disclaimer →

Mentioned

software bill of materials U.S. government

⚑ Spot an error? Report it

More from Eric Byers

Assertion Not checkable as stated

Byers: Companies often do not know if they run SolarWinds

“Nobody you know, nobody has a silver bullet to solve a problem like solar winds, but what we've seen in our customer base and we've heard in government disclosures is the companies don't even know if they run solar winds.”

Eric Byers Oct 9, 2021 ▶ 1:27 Security Software Adolus Breaks $600k ARR, $4m Valuation

Opinion

Byers: Adolus's $4M valuation was an absolute bargain in hindsight

“I think it was a bargain, actually. You know but, you know, I didn't have a crystal ball to know that President Biden would be releasing executive orders about supply chain. I didn't know that SolarWinds was going to happen, so it was, yeah, it was it was an a…”

Eric Byers Oct 9, 2021 ▶ 3:28 Security Software Adolus Breaks $600k ARR, $4m Valuation

Disclosure

Eric Byers: Adolus Counts Honeywell and Caterpillar Among Enterprise Contracts

“Our large contracts are, you know, our contracts include people like Honeywell and Caterpillar.”

Eric Byers Oct 9, 2021 ▶ 6:22 Security Software Adolus Breaks $600k ARR, $4m Valuation

Assertion Not checkable as stated

Byers: Adolus customers pay between $5K and over $40K monthly

“Customers will pay as little as 5000 a month. Some of them are paying, oh, probably north of about 40,000 a month.”

Eric Byers Oct 9, 2021 ▶ 2:12 Security Software Adolus Breaks $600k ARR, $4m Valuation

Disclosure

Eric Byers: Adolus Has Three Primary Customers and Six Large Pilots

“We've got three primary customers and about six large pilots running right now.”

Eric Byers Oct 9, 2021 ▶ 5:56 Security Software Adolus Breaks $600k ARR, $4m Valuation

Disclosure

Eric Byers: Adolus Generates Just Under $600K in Annual Revenue

“We're doing a little less than 600,000 a year.”

Eric Byers Oct 9, 2021 ▶ 6:16 Security Software Adolus Breaks $600k ARR, $4m Valuation

Eric Byers: Software vendors are now regulated to supply SBOMs to US government

More from Eric Byers

Turn any episode into a week of clips.