Announced details
SBOM generation and management; software component management; collection, assessment and triage of vulnerability information; vulnerability response across PSIRT, development and quality assurance departments; VDP compliance; CRA compliance; and audit and accountability requirements
Joint development company of ヴェス. ヴェス is a subsidiary of Orchestra Holdings.
Viettel Cyber Security: based in Hanoi, Vietnam; Chairman and CEO Nguyen Son Hai (グエン・ソン・ハイ). アートネット株式会社: based in Shinjuku-ku, Tokyo; Representative Director Phan Quang Truong (ファン クアン チュオン). No information is provided on either company’s business activities, capital or year of establishment.
Four plans are available: Free, Starter, Pro and Enterprise. Specific pricing is Not disclosed. The Pro plan’s features can be trialed for up to 3 products.
The company does not address Contract Value / Impact on Business Performance.
| Item | Details |
|---|---|
| Names of Products / Services Covered | SBOM＋（SBOM plus） |
| Counterparty | Viettel Cyber Security, アートネット株式会社 |
| Counterparty overview | Viettel Cyber Security: based in Hanoi, Vietnam; Chairman and CEO Nguyen Son Hai (グエン・ソン・ハイ). アートネット株式会社: based in Shinjuku-ku, Tokyo; Representative Director Phan Quang Truong (ファン クアン チュオン). No information is provided on either company’s business activities, capital or year of establishment. |
| Relationship with the Company | Joint development company of ヴェス. ヴェス is a subsidiary of Orchestra Holdings. |
| Offering price | Four plans are available: Free, Starter, Pro and Enterprise. Specific pricing is Not disclosed. The Pro plan’s features can be trialed for up to 3 products. |
| Launch date | Full release began on 1 September 2026 (actual). The beta version became available in July 2026. |
| Applicable area | SBOM generation and management; software component management; collection, assessment and triage of vulnerability information; vulnerability response across PSIRT, development and quality assurance departments; VDP compliance; CRA compliance; and audit and accountability requirements |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.To address software supply chain security risks arising from the growing use of OSS and third-party components, and because the management of SBOMs, vulnerability response histories and evidence is required for compliance with regulations including the CRA.