On July 30, 2024, Exiger, the market-leading supply chain and third-party risk AI company, announced the acquisition of aDolus Technology Inc., a software supply chain risk visibility platform. This strategic move, whose transaction value was not disclosed, aims to integrate aDolus’ capabilities in generating software bills of material (SBOMs) and analyzing binaries for software provenance into Exiger’s Ion Channel platform. The integration enhances visibility for binaries without SBOMs, as well as device firmware, operational technology (OT), and IoT.

The acquisition addresses the growing threat of software supply chain attacks, expected to triple between 2021 and 2025. Exiger’s enhanced platform will offer independent verification of software components, critical in mitigating risks outlined by the U.S. Federal Government, including Executive Order 14028 and the recent National Security Memorandum 22.

Exiger President Carrie Wibben emphasized the need to secure legacy systems, whose maintenance costs exceed $1 trillion. The combined capabilities of Exiger and aDolus will allow customers to verify software suppliers' claims and uncover hidden third-party risks, a necessity highlighted by recent high-profile cyber incidents. This move also strengthens Exiger’s presence in Canada through Exiger Canada, Inc., based in Toronto, Ontario.

Legal advisors for the transaction included Cassels Brock & Blackwell LLP for Exiger and Fasken Martineau DuMoulin LLP for aDolus. This acquisition follows Exiger’s recent purchases of Ion Channel and Versed AI, further solidifying its position in the cybersecurity landscape. aDolus Technology also operates in Canada, serving sectors such as energy, telecom, and manufacturing