myESI (My Enterprise Security Intelligence): An SBOM-Powered Platform for Software Supply Chain Security and Compliance Automation

Modern software is assembled, not written: the majority of code shipped in production applications originates from third-party open-source libraries, transitive dependencies, and AI-generated snippets rather than an organization's own engineers. This whitepaper presents myESI (My Enterprise Security Intelligence), a software supply chain security and compliance platform developed by iSeeWaves (Private) Limited. It describes the systemic risks motivating the platform, its distributed service architecture, its integrated baseline security controls, static analysis, dynamic runtime testing across web applications and compiled binary deliverables, dependency auditing, SBOM generation, API security testing, and secrets scanning, and its alignment with ISO/IEC 27001:2022, NIST CSF 2.0, and OWASP frameworks. myESI was conceived and is led by Abdullah Nasir, CEO of iSeeWaves (Private) Limited.