Automatically discover tech stack versions & lifecycle data

The IT stack of many companies is increasingly composed of large estates of self-built software. Based on customer feedback, we are extending the discovery of the technology stack for ingested SBMOs beyond microservices and tech stacks to include version-level details and end-of-support data. 

For workspaces with SAP LeanIX Technology Risk and Compliance, when you discover tech stacks (languages and frameworks) from your SBOMs, we now automatically look for tech stack versions (e.g., "Spring Boot 3.5") and match them against the reference catalog to surface end-of-support dates. In case you use custom or proprietary frameworks within your organisation, you can now define your own tech stack versions, add lifecycle data, and specify purl matching rules for incoming purls, getting the same governance visibility as open-source frameworks. The result is an accurate, version-level tech debt discovery and obsolescence risk aggregation for self-built applications with zero manual work.

Key Benefits:

• No more surveys to gather versions and lifecycles – Version data is automatically extracted and kept current as code evolves

• Proactive obsolescence risk management – Discover end-of-support tech stacks before they become tech debt

• Support for custom frameworks – Define your own proprietary tech stack versions and end-of-support dates

• Accurate modernization planning – Know exactly which applications need to run on modern technologies and prioritize investments

• Compliance and security – Catch security windows and compliance drift for unsupported versions automatically.