Device Manufacturers may have limited visibility of software components and their origin. An automated assessment process is required to provide SBOM manifest and security assurance into customer supply chains, for government procurement, and to meet major market regulatory requirements.
The Cypherbridge ESAS SaaS dashboard puts the control at your fingertips. Assess and continuously monitor IoT cybersecurity CVEs, CWEs. Flag vulnerabilities and rank by priority. SDKPac IoT device System Monitor works in conjunction with ESAS to continuously monitor the IoT device for exceptions and events, with visibility and alerts generated for intervention by OT staff.
ESAS works with the Cypherbridge CRA tailored software kits and services to provide comprehensive solutions to help meet the EU Cyber Resilience Act requirements for risk assessment, continuous monitoring and severity based vulnerability reporting and mitigation including OTA update.
Features
- Automated Assessment and Risk Analysis
- Reports and Recommendations
- Software Bill of Materials SBOM
- Regulatory Compliance
- Support Chain Assurance
- Product Resiliency
- Mitigation and Remediation Services
- Continuous Monitoring and Reporting
Mitigate Security Vulnerabilities
Upgrade and modernize your IoT device fleet with the Cypherbridge SDKPac product family, including X.509 credentials management system across all related protocols including TLS, VPN, EAP-TLS, and uLoadXL secure boot code sign and verify. The SDKPac Credentials Manager provides the in-device trust store to manage built-in and dynamically provisioned credentials for CA, server and device certificates and private key pairs. Using the EST client, production systems can deploy managed credential services at scale. The EST client integrates as the device level and support credential management at each stage of the IoT device lifecycle including pilot and production, manufacturing line provisioning, device on-boarding, and long-term credential management