Average Ratings 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

No User Reviews. Be the first to provide a review:

Write a Review

Description

Craftifact serves as a European SaaS platform designed for software teams that require dependable package distribution alongside enhanced supply-chain transparency. It offers various repository types including hosted, proxy, and group repositories for technologies such as Maven, npm, Python, OCI/Docker, and Go, all accompanied by a user-friendly browser interface for managing artifact metadata and repositories. Users can upload CycloneDX SBOMs and, for certain hosted items, generate them to be associated with specific artifacts or OCI digests. Teams have the capability to scrutinize dependencies and assess vulnerability, licensing, exposed-secret, and policy alerts in close proximity to the associated artifact. Access management is facilitated through OIDC, RBAC, group configurations, robot accounts, and scoped tokens, all supported by APIs designed for CI/CD and evidence workflows. Operated by a German firm under EU jurisdiction, Craftifact includes features such as managed updates, monitoring, and backups within the plan’s scope, ensuring predictable pricing that does not rely on seat counts. While it aids teams in fulfilling CRA-relevant technical preparations, it is important to note that it does not serve as a substitute for legal advice or conformity assessments. This combination of features makes Craftifact an essential tool for teams focused on both efficiency and compliance in their software development processes.

Description

RaptorGRC CBOM serves as a self-managed tool designed to discover and inventory cryptographic elements for organizations looking to transition to post-quantum cryptography. Its functionality includes scanning TLS and SSH endpoints, as well as web URLs that can be manually entered or imported from CSV files, alongside examining certificate stores for both Windows and Linux. Additionally, it assesses Windows SCHANNEL and Group Policy settings, along with Linux crypto-policies and configurations for OpenSSL and sshd. The software effectively catalogs certificates, keys, protocols, and algorithms, pinpointing any weak or quantum-vulnerable cryptographic components, ultimately providing a signed CycloneDX 1.7 cryptographic bill of materials. Teams benefit from the ability to categorize assets by service, document data sensitivity and retention requirements, prioritize migration efforts, compare different scan results, and produce reports for board readiness, NCSC 2028 discovery, remediation, and OMB M-23-02 compliance. The system operates as a container hosted on Linux, can function offline, and is compatible with SQLite, PostgreSQL, or SQL Server databases. Currently, the beta version is available for assessment purposes only and is not intended for use in production environments, ensuring that users can test its capabilities without the risks associated with live deployment.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

No details available.

Integrations

No details available.

Pricing Details

€99/month
Optional add-ons and annual discount available.
Free Trial Yes 
Free Version No 

Pricing Details

$0
Free to install and run on infrastructure you control for internal organizational use. The current beta is for evaluation, not production use.
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

SoluForge

Founded

2025

Country

Germany

Website

craftifact.com

Vendor Details

Company Name

Biff Labs Ltd

Founded

2026

Country

United Kingdom

Website

raptorgrc.com/products/cbom

Product Features

Alternatives

Alternatives

AVX ONE Reviews

AVX ONE

AppViewX