ORT Server as an open source tool for software asset tracking and regulatory compliance.

Martin von Willebrand, Double Open

ORT Server covers software component analytics, scanning, vulnerability monitoring and resolution, license compliance, SBOM and artefact management. It is a fully open source platform with many adopters across Europe. It supports configuration as code and within a nice UI. It’s an API first platform well suited for MCP servers and building agentic workflows to e.g. manage vulnerabilities or license compliance rule violations.

This talk introduces the ORT Server, it’s building blocks and it’s community, and its capabilities, mapping them to the CRA obligations. It goes on to show practical usage patterns. And examples on how agentic workflows can be built