aDolus

aDolus builds the FACT Platform, a software supply chain security tool that generates enriched Software Bills of Materials (SBOMs) for industrial control systems, operational technology, and IoT devices, including devices whose vendors don’t natively supply one. Rather than depending on a vendor-provided SBOM, FACT analyzes software binaries and device firmware directly to reconstruct a component inventory, then screens it for known vulnerabilities, embedded malware, counterfeit components, and certificate or provenance issues, producing a risk score aimed at procurement, product security, and vulnerability management teams in regulated and critical-infrastructure industries.

Founded in 2017 and headquartered in Victoria, British Columbia, aDolus built its business partly around the SBOM mandate created by U.S. Executive Order 14028, which directs federal agencies to require SBOMs from software suppliers, a requirement that is especially hard to satisfy for legacy industrial and OT equipment. In July 2024, third-party and supply chain risk management firm Exiger acquired aDolus’s assets, folding its binary-level SBOM and firmware analysis capability into Exiger’s broader supply chain risk platform.

aDolus continues to operate its FACT Platform under its own brand post-acquisition, addressing a real and still largely unsolved gap: most SBOM tooling assumes a cooperative vendor, while aDolus’s binary-analysis approach works even when one isn’t available. The Exiger acquisition should extend its distribution into a larger enterprise risk customer base, though it also means aDolus’s future roadmap is now set within Exiger’s broader strategy rather than as an independent company.