2026 年每日通報的 CVE 數量比前一年多 131%。

資產清冊管理

全面掌握您的裝置群:您有哪些產品、執行哪些軟體,以及部署在哪裡

裝置登錄

集中登錄裝置群中的每一項實體產品。CRACI 為所有已部署裝置提供單一可信的資料來源,涵蓋型號、韌體版本、部署地點與目前狀態,讓您隨時確切掌握現場有哪些產品。

Which versions are deployed to which products CRACI's inventory view shows exactly which software versions are deployed to which products, globally, and each version traces back to the build and SBOM that produced it. Inventory view Product Deployed version Web app v4.12.0 Mobile API v2.3.1 Gateway firmware v1.8.4 Sensor firmware v3.0.2 Each version traces back Version Build SBOM

監控您出貨的所有產品漏洞

每當有新漏洞公布,CRACI 都會持續重新評估您各版本受監控的 SBOM,並一併監控外購元件的廠商 SBOM。當資安公告影響某個版本時,資產清冊檢視會確切列出該版本部署在哪些產品上,讓您不必重新掃描就知道修正該送往何處。資安團隊會研判該項發現,並轉交給負責修正的團隊。

Vulnerabilities across everything you have deployed When a new vulnerability is published, CRACI re-evaluates the monitored SBOMs of your releases and vendor SBOMs, finds the affected version, and the inventory view shows which products that version is deployed to. The finding is triaged and routed to the team that owns the fix. New advisory published Long after the release shipped Monitored SBOMs re-evaluated Your release builds and your vendors' SBOMs Affected: Gateway firmware v1.8.4 Inventory: where v1.8.4 is deployed Product Deployed version Gateway Pro v1.8.4 Gateway Mini v1.8.4 Route the fix

SBOM 與裝置對應

將每台裝置連結到其確切的軟體組成。CRACI 將 SBOM 對應到特定產品版本與個別裝置,當新漏洞出現時,您能立即知道裝置群中哪些裝置受到影響,以及它們位於何處。

Provenance data from every build Every job on CRACI records the packages it fetched and its network trace. The public REST API returns the job's SBOMs, network trace and provenance. Build release job on CRACI Recorded packages fetched network trace Provenance build data, via the API Ask the API about any job Job → SBOM, trace, provenance Returned by the API Job Packages CycloneDX SBOM Network trace Recorded on every CRACI job, no extra step

部署追蹤

掌握您的產品在哪裡,以及它們執行哪些軟體。追蹤裝置位置、客戶部署與區域分布,了解您的暴險範圍並規劃針對性的更新。當 CRA 要求您通知使用者資安問題時,這一點至關重要。

One view across builds and repositories Findings from every build are aggregated across repositories, with organization views on the default branch. The inventory view shows which software versions are deployed to which products. Default branch builds api-service web-app firmware billing Organization view Findings aggregated across builds and repositories 4 repositories, one list of findings Inventory: deployed versions Product Version Web app v4.12.0 Mobile API v2.3.1 Gateway firmware v1.8.4

版本可視性

一眼看出裝置群中部署了哪些韌體與軟體版本。CRACI 追蹤版本分布、找出過時的裝置並標示版本分散的情況,讓您能排定推送優先順序,確保每項產品都符合現行的資安標準。

Vendor SBOMs tracked next to your own SBOMs from your own builds and SBOMs added from your vendors are monitored in the same place, so bought-in components are re-evaluated against new vulnerabilities alongside your own dependencies. Your builds api-service SBOM web-app SBOM firmware SBOM Your vendors Payment SDK SBOM Camera module SBOM RTOS SBOM Monitored in one place Every SBOM re-evaluated as new vulnerabilities are published Third-party code tracked like your own dependencies Findings triaged and routed to the team that owns the fix

掌握您的裝置群

預約示範,全面掌握您的裝置資產清冊

預約示範