2026 年每日通報的 CVE 數量比前一年多 131%。

工業物聯網與 ICS/SCADA 的 CRA 法規遵循

保護您的工業控制系統，並在製造業與關鍵基礎設施中持續符合 CRA 與 IEC 62443

工業物聯網裝置群管理

在數千台工業裝置與控制系統之間管理 CRA 法規遵循。CRACI 追蹤您整個 ICS/SCADA 裝置群的裝置資產清冊、韌體版本與資安狀態。即時監控合規情形，確保所有裝置都符合營運技術（OT）與關鍵製造基礎設施的資安要求。

Which versions are deployed to which products CRACI's inventory view shows exactly which software versions are deployed to which products, globally, and each version traces back to the build and SBOM that produced it. Inventory view Product Deployed version Web app v4.12.0 Mobile API v2.3.1 Gateway firmware v1.8.4 Sensor firmware v3.0.2 Each version traces back Version Build SBOM

IEC 62443 與 ISO 27001 合規

持續符合工業自動化與控制系統資安的 IEC 62443 標準。CRACI 遵循 ISO 27001 與 ISO 27002 的資訊安全管理最佳實務。追蹤安全等級（SL 1-4）、落實縱深防禦策略，並在營運技術的整個生命週期中記錄合規情形。

Evidence from the build record SBOMs export as CycloneDX or SPDX, including the vulnerabilities found in their components, and the public REST API returns SBOMs, network traces and provenance, for customers, auditors and frameworks such as the EU Cyber Resilience Act, NIS2, FDA SBOM requirements and ISO 27001 supply chain controls. The build record SBOMs Vulnerability records Provenance Network traces Export CycloneDX SPDX REST API Who asks for it Customers Auditors Security reviews Frameworks this evidence supports EU Cyber Resilience Act NIS2 supply chain security FDA SBOM for cyber devices ISO 27001 supply chain controls

OT 網路資安與監控

依 CRA 要求監控並保護營運技術網路。CRACI 協助您維持良好的韌體資安態勢，並讓 SDK 保持在最新狀態。若您的韌體以 Yocto 建置，請參閱<a href="/yocto-vulnerability-scanning">為什麼 SBOM 掃描器會遺漏 Yocto 建置中的內容</a>。

An egress policy on the build network A build job connects to hosts in its egress policy, such as package registries and Git, and a connection to a host outside the policy is blocked. The policy is validated before the job starts and fails closed, and a violation sends an alert. Egress policy Default deny Validated before the job starts Fails closed · 24 source presets Build job on a CRACI runner npm registry allowed PyPI allowed Git over HTTPS allowed Unapproved host blocked Alert on policy violation Connections are recorded in the job's network trace

製造業與關鍵基礎設施

專為工業製造商與關鍵基礎設施營運者打造。CRACI 支援工廠、公用事業與基本服務的法規遵循要求，可整合既有的 SCADA 系統、PLC 與工業網路，並維護符合 ISO 27001 框架的完整文件。

Embedded builds on CRACI runners Yocto and BitBake builds such as core-image-sato run on CRACI runners at size 32. Like every CRACI job, the build runs under an egress policy, records what it fetched and its provenance data. Embedded build bitbake core-image-sato Yocto and BitBake; pi-gen for Raspberry Pi OS CRACI runner, size 32 32 vCPU in an isolated virtual machine Egress policy Fetches recorded Provenance Firmware image SBOM recorded during the build

保護您的聯網裝置

預約示範，了解如何以 CRACI 管理資安與法規遵循

預約示範