Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.
Description
RaptorGRC CBOM serves as a self-managed tool designed to discover and inventory cryptographic elements for organizations looking to transition to post-quantum cryptography. Its functionality includes scanning TLS and SSH endpoints, as well as web URLs that can be manually entered or imported from CSV files, alongside examining certificate stores for both Windows and Linux. Additionally, it assesses Windows SCHANNEL and Group Policy settings, along with Linux crypto-policies and configurations for OpenSSL and sshd. The software effectively catalogs certificates, keys, protocols, and algorithms, pinpointing any weak or quantum-vulnerable cryptographic components, ultimately providing a signed CycloneDX 1.7 cryptographic bill of materials. Teams benefit from the ability to categorize assets by service, document data sensitivity and retention requirements, prioritize migration efforts, compare different scan results, and produce reports for board readiness, NCSC 2028 discovery, remediation, and OMB M-23-02 compliance. The system operates as a container hosted on Linux, can function offline, and is compatible with SQLite, PostgreSQL, or SQL Server databases. Currently, the beta version is available for assessment purposes only and is not intended for use in production environments, ensuring that users can test its capabilities without the risks associated with live deployment.
API Access
Has API
No
API Access
Has API
No
Integrations
Aqua
Yes
ArmorCode
Yes
Checkmarx
Yes
Checkov
Yes
CybeDefend
Yes
Cybellum
Yes
Debricked
Yes
Endor Labs
Yes
FOSSA
Yes
Flexera One
Yes
Integrations
Aqua
No
ArmorCode
No
Checkmarx
No
Checkov
No
CybeDefend
No
Cybellum
No
Debricked
No
Endor Labs
No
FOSSA
No
Flexera One
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
$0
Free to install and run on infrastructure you control for internal organizational use. The current beta is for evaluation, not production use.
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
No
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
No
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
CycloneDX
Website
cyclonedx.org
Vendor Details
Company Name
Biff Labs Ltd
Founded
2026
Country
United Kingdom
Website
raptorgrc.com/products/cbom