Practical articles for manufacturers of connected products. SBOM, CVE management, PSIRT, CRA obligations — no fluff.
What the EU Cyber Resilience Act requires for SBOMs: format, depth, technical documentation, deadlines, SPDX vs CycloneDX, and how to handle embedded products.
·
VEX tells customers whether a CVE found in your SBOM is actually exploitable in your product. Statuses, justifications, CycloneDX vs CSAF vs OpenVEX, and what the EU CRA changes.
·
Our maturity simulator gives you a personalised score in 10 minutes.
