What Soos is
Soos offers holistic ASPM scanners and ingestion, with a special focus on in depth SCA scanning and SBOM generation The vendor site is soos.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Soos covers
Soos is in the catalog for these capabilities. Categories: ASPM, DAST, SAST, SCA, and Container Vulnerability. Catalog tags: Hands-on and Best for Startups.
How to evaluate Soos in a security program
Use Soos as a stack candidate, not as diligence evidence. The oneNorma score for Soos is 5.8/10 (percentile 75). If the real gap is in ASPM, DAST, SAST, SCA, and Container Vulnerability, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what soos.io publishes. Contrast it with pentesting and Security Cloud & Compliance.