2026 年每日通報的 CVE 數量比前一年多 131%。

比較

嵌入式與產品資安

受 CRA 規範之聯網產品的韌體與裝置安全。

更新日期

Where embedded security tools act A connected product moves from build to firmware image to a device in the field. CRACI works at the build, for example a Yocto BitBake build, and records what it fetched. ONEKEY and Finite State analyze the firmware image as a binary, and Finite State also analyzes supplier SBOMs. Exein runs on the device and monitors its behavior. Build such as Yocto BitBake CRACI Records what the build fetched: a build SBOM and provenance Firmware image the binary you ship ONEKEY Finite State Analyze the binary, including code you did not build yourself Device in the field Exein Runs on the device and monitors its behavior Evidence for the CRA can come from each stage; the tools complement each other

每篇比較都會說明另一款產品的強項、CRACI 的不同之處，以及何時適合兩者並用。所有類別請見所有比較。

使用 Yocto 建置嗎？從映像檔掃描器到二進位分析，請參閱SBOM 掃描器為何會漏掉 Yocto 建置中的內容，以及Black Duck 的 BitBake 偵測器有何不同。

CRACI 與各工具比較

並列比較

在同一頁比較多款工具，適合您在選擇類別而非單一產品時參考。

其他類別

在您自己的管線上體驗 CRACI

預約示範，我們將與您一起檢視您的建置、SBOM 與法規遵循佐證資料。

預約示範