Skip to content

Interlynk

A Menlo Park SaaS platform automating SBOM generation and software supply chain compliance for medical device makers and software vendors.

Visit Website ↗ + Add to Compare Claim This Company
52/100Incremental Innovator

Overview

Interlynk, founded in 2022 and based in Menlo Park, California, builds a SaaS platform that automates software bill of materials (SBOM) collection across the software development lifecycle, connecting build pipelines for automated generation and tracking open-source license and component health. Its positioning leans heavily on regulatory compliance: FDA 524B for medical devices, the EU Cyber Resilience Act, IEC 62304, PCI DSS 4.0, and DORA.

Its clearest customer evidence is in medical devices, where BIOTRONIK engaged Interlynk for SBOM generation, vulnerability reporting, and open-source risk assessment ahead of FDA cybersecurity requirements. Other disclosed customers include OwnersBox, a fantasy sports platform, for PCI DSS compliance, and Empo Health, a remote diabetic care company. The company also maintains open-source SBOM tooling — sbomqs, sbomasm, and sbomgr — that it says is used by security teams and government agencies independent of its paid product, and it sells through AWS Marketplace.

Interlynk’s differentiation is a narrow, compliance-driven focus rather than a broad application security platform — it is betting that regulatory deadlines like the FDA’s 524B and the EU CRA will force SBOM automation to become a line-item requirement rather than a nice-to-have. The company has not disclosed funding, and public evidence of its customer base beyond the handful of named accounts is limited.

Innovation Matrix Assessment

Innovation Velocity 5/10

Built out a working SBOM platform plus three open-source tools (sbomqs, sbomasm, sbomgr) within a few years, aligned closely to emerging regulatory deadlines.

Operational Value 6/10

Directly reduces the manual burden of producing audit-ready SBOMs for teams facing FDA, EU CRA, or PCI DSS 4.0 requirements.

Market Momentum 4/10

Named customers like BIOTRONIK, OwnersBox, and Empo Health are real but modest in number, and no funding round has been disclosed publicly.

Category Disruption 4/10

SBOM automation and ASPM tooling is an increasingly crowded compliance-driven niche rather than a fundamentally new approach to application security.

Real-World Efficacy 5/10

Named production customer engagements, including a medical device maker preparing for FDA cybersecurity review, represent real rather than purely theoretical use.

Enduring Relevance 7/10

SBOM requirements under the FDA, EU Cyber Resilience Act, and similar regulations will keep expanding, not shrink.

Why CISOs Should Care

Takes the manual, audit-heavy work of producing compliant SBOMs off engineering teams' plates ahead of hard regulatory deadlines.

What Makes It Different

Anchors its product specifically to named regulatory frameworks (FDA 524B, EU CRA, PCI DSS 4.0) rather than general-purpose SCA scanning.

The Matrix Verdict

52/100 — INCREMENTAL INNOVATOR

An Incremental Innovator addressing a real and growing compliance need, with credible but still limited public evidence of customer scale.

Editorial Note: Claims vs. Verified Findings

Customer engagements (BIOTRONIK, OwnersBox, Empo Health) are drawn from company press releases and have not been independently corroborated beyond those announcements.

Sources