Insignary Clarity AIR Enhances Software Security
On October 8, 2026, Toronto-based Insignary Inc. announced the launch of Clarity AIR, a cutting-edge source-code scanning solution. Designed to tackle the gaps left by incomplete software manifests, Clarity AIR aims to provide comprehensive insights into the open-source and AI-generated code present in applications, beyond what developers report.
Understanding the Need for Clarity AIR
In today’s digital landscape, approximately 70-90% of applications rely heavily on open-source code. However, much of this code isn’t captured in traditional manifests, posing significant risks. These can include code snippets copied from forums or AI-generated code that hasn’t undergone thorough review. Insignary’s Clarity AIR addresses these challenges by identifying such code at the source-code level.
How Clarity AIR Functions
Clarity AIR utilizes Insignary’s proprietary fingerprint database to detect open-source code that might have been altered or regenerated—common occurrences when AI assistants are involved. The tool assesses how much of the codebase is AI-written, categorizing it with a confidence score. This allows security and compliance teams to recognize AI outputs as distinct risk elements.
Moreover, Clarity AIR documents the AI dependencies within software, generating an AI Bill of Materials alongside the traditional open-source one. All findings undergo human verification before being integrated into audit-ready Software Bill of Materials (SBOMs) and reports.
Current Compliance Landscape
The compliance environment for Chief Information Security Officers (CISOs) is rapidly evolving, particularly in North America. In the United States, recent updates to OMB policies necessitate independent verification of vendor SBOMs, while Canada’s Critical Cyber Systems Protection Act introduces new supply-chain obligations. Given this fragmented landscape, relying solely on developer-declared inventories poses a significant challenge.
Clarity AIR complements Insignary’s existing suite, including Clarity and Clarity SC, offering a comprehensive solution for managing the lifecycle from source code to compiled binaries.
Availability and Company Background
Insignary’s Clarity AIR is now accessible for deployment on customer infrastructures, with trial licenses available on their website. A demo feature showcasing AI code detection is also offered for public trial.
Founded in Toronto, Insignary specializes in software supply chain security, leveraging patented binary fingerprint technology to verify software contents without source code. The company collaborates with strategic partners like BearingPoint and Cybertrust Japan, and has been recognized in multiple Gartner reports for its contributions to secure software engineering.
