Know who your business depends on, and what could break.

HOEM Trust helps small and medium businesses manage supply-chain security risk: the vendors you rely on, the companies behind them, and the software they ship to you.

Ask for a demo

What it does

One place to answer the questions customers, auditors and insurers now ask about your suppliers.

Vendor risk reviews

Questionnaires sized to each vendor's importance, mapped to NIST supply-chain guidance, with simple intake links your suppliers fill in.

The companies behind your vendors

Record who your vendors rely on, often listed in their SOC 2 reports, and see when several vendors depend on the same company.

Software bills of materials

Import or generate SBOMs, check every component against public vulnerability data, and flag issues known to be exploited.

Trace Map

Follow a risk from a single software component back through the product and vendor to your business, on one interactive map.

Email we send

  • Only to people with an account, added by their own organization's administrator. There is no public sign-up and no mailing list.
  • Only service email: alerts about newly published critical vulnerabilities in software you track, a daily summary, and occasional notes about new features.
  • No marketing. Each person can turn each kind of email off in their settings.
  • Emails show counts and categories only, with a link to sign in. They never contain your vendor or audit details.

Questions or a problem with an email? Write to contact@hoemtrust.com.

Contact

HOEM Trust is in early access and shown by demo. To see it or ask a question, email contact@hoemtrust.com.