Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Clearlane CRA is a Jira Cloud application designed specifically for manufacturers and product security teams to facilitate the management of vulnerability reporting in accordance with the Cyber Resilience Act. This innovative tool transforms Jira's vulnerability and incident work items into comprehensive records that meet the Article 14 deadlines, while also preparing the necessary ENISA reporting fields for users to review and copy. Additionally, it efficiently tracks affected products and their respective versions utilizing CycloneDX or SPDX software bills of materials. Teams can document fixes, notify users, generate CSAF 2.0 security advisories, and maintain PDF evidence alongside Jira work items, ensuring thorough documentation. The application is available in English, French, and German, and operates seamlessly on the Atlassian Forge platform. Notably, the app does not directly submit reports to ENISA; instead, it enables users to evaluate their reporting obligations and submit through the designated authority's platform, empowering teams to take charge of their compliance processes. This flexibility allows organizations to stay proactive in managing their cyber resilience efforts.

Description

SBOM Archi serves as a dynamic SBOM risk management solution tailored for contemporary software supply chains. This platform empowers organizations to detect, oversee, and rank risks related to vulnerabilities, open-source licenses, and the lifecycle of components in real time. In contrast to conventional SBOM tools that produce static reports, SBOM Archi facilitates ongoing monitoring and delivers actionable insights, enabling teams to proactively address emerging risks. The system seamlessly integrates with industry-standard formats like SPDX and CycloneDX, guaranteeing compatibility across various development settings. Additionally, it enhances risk prioritization through CVSS and EPSS metrics, which allows security and engineering teams to concentrate their efforts on the most pressing concerns. Engineered for DevSecOps and enterprise contexts, SBOM Archi not only aids organizations in fulfilling regulatory obligations such as the EU Cyber Resilience Act (CRA 2027) and US Executive Order 14028 but also redefines SBOM from merely a compliance necessity into a strategic operational security asset. Ultimately, its innovative approach ensures that organizations remain resilient in the face of evolving threats and vulnerabilities.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

No images available

Integrations

Atlassian Rovo Yes 
Dependabot Yes 
Jira Yes 
Snyk Yes 
Trivy Yes 

Integrations

Atlassian Rovo No 
Dependabot No 
Jira No 
Snyk No 
Trivy No 

Pricing Details

$10/month
Starts at $10/month for up to 10 users; larger teams are priced per user. Plans include a free trial.
Free Trial Yes 
Free Version No 

Pricing Details

Contact for pricing
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Clearlane Apps

Founded

2026

Country

France

Website

clearlaneapps.com/cra/

Vendor Details

Company Name

SBOM Archi

Founded

2025

Website

sbomarchi.us

Product Features

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management No 
Policy Management No 
Prioritization No 
Risk Management No 
Vulnerability Assessment No 
Web Scanning No 

Alternatives

Alternatives

Threat Detective Reviews

Threat Detective

Threat Detective Ltd
OSPulse Reviews

OSPulse

Fortitude Omnis Group Ltd
CodeSentry Reviews

CodeSentry

CodeSecure
Threat Detective Reviews

Threat Detective

Threat Detective Ltd