Spice Labs secures online systems through visibility and actionable risk management, enabling companies to use Continuous Diagnostics and Mitigation (CDM), Software Bill of Materials (SBOM), and other CISA-promoted approaches for compliance. Our open source tools analyze software artifacts against the OmniBOR Corpus, revealing to organizations the detailed composition of their complex systems, creating a persistent and irrefutable inventory of all built and deployed artifacts.