Skip to content
deveca GRC
Module · SBOM & vulnerability management

SBOM & vulnerability management

CRA-ready from day one — SBOM import, CVE scan and dependency graph.

See the module live
grc.deveca.app
4291 %798 %
SBOM & vulnerability management · live view from the deveca platform

What this module does

SBOM upload (SPDX, CycloneDX), component inventory, dependency graph, NVD vulnerability scan, vulnerability alerts and NVD sync.

Capabilities

  • SPDX and CycloneDX import
  • Component inventory and dependency graph
  • NVD vulnerability scan and CVE alerts
  • Alerts for CRITICAL/HIGH vulnerabilities

More modules

All modules

Cockpit & overview

Your CISO dashboard in 5 minutes — not 5 weeks of Excel tinkering.

Organisation & scope

Scope, stakeholders, obligations — in one place, and auditable.

IT risk management (ISO 27005)

From an Excel risk register to an auditable ISMS.