Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.
Description
Threat Detective is specialized software designed for managing SBOMs and vulnerabilities specifically tailored for teams in the medical device sector.
Transform your SBOM and vulnerability assessments into cybersecurity evidence that is ready for submission, while ensuring that this evidence remains up-to-date through ongoing post-market surveillance.
Threat Detective empowers teams to:
* Import CycloneDX and SPDX SBOMs
* Verify the contents and essential components of SBOMs
* Detect vulnerabilities from a variety of advisory sources
* Rank findings based on CVSS, EPSS, and CISA KEV
* Record exploitability, remediation, and mitigation strategies
* Publish VEX
* Create documentation for FDA, EU MDR, and UK regulatory processes
* Continuously track each active device and software version for newly revealed vulnerabilities
Designed specifically for medical device manufacturers, Threat Detective modernizes traditional spreadsheet-based vulnerability management by offering a streamlined, auditable framework for both premarket review and continuous post-market monitoring, ensuring compliance and enhanced security throughout the product lifecycle. This innovative approach not only increases efficiency but also elevates the standard of care within the industry.
API Access
Has API
No
API Access
Has API
No
Screenshots View All
No images available
Integrations
Anchore
Yes
Aqua
Yes
ArmorCode
Yes
Checkmarx
Yes
Checkov
Yes
Cloudsmith
Yes
Codenotary
Yes
Cybellum
Yes
Debricked
Yes
FOSSA
Yes
Integrations
Anchore
No
Aqua
No
ArmorCode
No
Checkmarx
No
Checkov
No
Cloudsmith
No
Codenotary
No
Cybellum
No
Debricked
No
FOSSA
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
$189/month/project
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
No
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
CycloneDX
Website
cyclonedx.org
Vendor Details
Company Name
Threat Detective Ltd
Founded
2025
Country
United Kingdom
Website
threatdetectivehq.com