What Kusari is
Kusari has built a fixing oriented SCA on top of robust SBOM capabilities via their contributions with GUAC and SLSA, which are well established frameworks for mapping open source dependencies. The vendor site is kusari.dev. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Kusari covers
Kusari is in the catalog for these capabilities. Categories: SCA. Catalog tags: Open Source.
How to evaluate Kusari in a security program
Use Kusari as a stack candidate, not as diligence evidence. The oneNorma score for Kusari is 5.3/10 (percentile 57). If the real gap is in SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what kusari.dev publishes. Contrast it with pentesting and Security Cloud & Compliance.