Software supply chain security firm Insignary Inc. announced on October 8, 2026, the general availability of Insignary Clarity AIR. The source-code scanning tool is designed to identify undeclared open-source dependencies and AI-generated code snippets that bypass traditional software bills of materials (SBOMs).
Scanning Source Code to Uncover Undeclared Snippets
Many modern applications incorporate open-source components that never appear in standard dependency manifests, such as code snippets copied from forums or generated by AI assistants. Clarity AIR addresses this gap by operating at the source-code level rather than relying solely on developer declarations.
The tool cross-references raw source code against Insignary’s fingerprint database of open-source software. It is capable of detecting components even after developers or AI code assistants have modified, adapted, or regenerated the original logic.
AI Code Scoring and AI Bill of Materials
Clarity AIR classifies AI-written code line by line and assigns confidence scores, allowing organization leaders to track AI assistant outputs as distinct risk factors. Additionally, the software catalogs the AI models, APIs, and frameworks embedded directly into an application, generating a dedicated AI Bill of Materials alongside standard open-source documentation.
To reduce false positives, every match detected by the platform must be reviewed and confirmed by a human before it is included in final reporting. The platform exports results as audit-ready SBOMs and compliance reports.
Addressing Regulatory Demands and Suite Integration
Insignary President and CEO Taek Wan Kim noted that software manifests cannot verify themselves, making direct code inspection necessary for tracking unrecorded AI code. The release coincides with heightened supply-chain compliance demands in North America, including the U.S. OMB Memorandum M-26-05 from January 2026, FDA Section 524B regulations, and Canada's Bill C-8 passed in June 2026.
Clarity AIR expands the Insignary Clarity product line, joining Insignary Clarity for binary-level software composition analysis and Clarity SC for SBOM governance. The platform is deployed on customer-owned infrastructure, with direct availability from Insignary and partner channels such as BearingPoint, Cybertrust Japan, TechMatrix, and TMA Solutions.
AI-generated editorial illustration; not a documentary photograph.
Source: Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code
SIGNAL TITANS
Leave a Reply