Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Craftifact serves as a European SaaS platform designed for software teams that require dependable package distribution alongside enhanced supply-chain transparency. It offers various repository types including hosted, proxy, and group repositories for technologies such as Maven, npm, Python, OCI/Docker, and Go, all accompanied by a user-friendly browser interface for managing artifact metadata and repositories. Users can upload CycloneDX SBOMs and, for certain hosted items, generate them to be associated with specific artifacts or OCI digests. Teams have the capability to scrutinize dependencies and assess vulnerability, licensing, exposed-secret, and policy alerts in close proximity to the associated artifact. Access management is facilitated through OIDC, RBAC, group configurations, robot accounts, and scoped tokens, all supported by APIs designed for CI/CD and evidence workflows. Operated by a German firm under EU jurisdiction, Craftifact includes features such as managed updates, monitoring, and backups within the plan’s scope, ensuring predictable pricing that does not rely on seat counts. While it aids teams in fulfilling CRA-relevant technical preparations, it is important to note that it does not serve as a substitute for legal advice or conformity assessments. This combination of features makes Craftifact an essential tool for teams focused on both efficiency and compliance in their software development processes.
Description
Scribe continuously attests to your software's security and trustworthiness:
✓ Centralized SBOM Management Platform – Create, manage and share SBOMs along with their security
aspects: vulnerabilities, VEX advisories, licences, reputation, exploitability, scorecards, etc.
✓ Build and deploy secure software – Detect tampering by continuously sign and verify source code,
container images, and artifacts throughout every stage of your CI/CD pipelines
✓ Automate and simplify SDLC security – Control the risk in your software factory and ensure code
trustworthiness by translating security and business logic into automated policy, enforced by guardrails
✓ Enable transparency. Improve delivery speed – Empower security teams with the capabilities to exercise
their responsibility, streamlining security control without impeding dev team deliverables
✓ Enforce policies. Demonstrate compliance – Monitor and enforce SDLC policies and governance to
enhance software risk posture and demonstrate the compliance necessary for your business
API Access
Has API
No
API Access
Has API
No
Integrations
Bitbucket
No
CircleCI
No
GitHub
No
GitLab
No
Jenkins
No
Microsoft Entra ID
No
Travis CI
No
Integrations
Bitbucket
Yes
CircleCI
Yes
GitHub
Yes
GitLab
Yes
Jenkins
Yes
Microsoft Entra ID
Yes
Travis CI
Yes
Pricing Details
€99/month
Optional add-ons and annual discount available.
Free Trial
Yes
Free Version
No
Pricing Details
Free
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
SoluForge
Founded
2025
Country
Germany
Website
craftifact.com
Vendor Details
Company Name
Scribe Security
Founded
2021
Country
Israel
Website
scribesecurity.com
Product Features
Product Features
Cybersecurity
AI / Machine Learning
No
Behavioral Analytics
No
Endpoint Management
No
IOC Verification
No
Incident Management
No
Tokenization
No
Vulnerability Scanning
No
Whitelisting / Blacklisting
No
DevOps
Approval Workflow
No
Dashboard
No
KPIs
No
Policy Management
No
Portfolio Management
No
Prioritization
No
Release Management
No
Timeline Management
No
Troubleshooting Reports
No