Skip to content
EmbedHarborPRODUCT SECURITY
Existing account sign in ↗
VALUE BEFORE SIGNUP

A focused question.
A useful next step.

Read locally, explore a sample, and keep the result in this tab. Every tool tells you what it actually does.

SBOM Validator

LIVE

Validate CycloneDX and SPDX files, inspect component quality and check vulnerability monitoring readiness.

Official schema validation, quality, dependency references and readiness run locally. Vulnerability detection is not performed.Open tool

SBOM Diff

LIVE

Compare two SBOMs to identify added, removed, and updated components.

Local A/B comparison of component identities and exact versions. No vulnerability or dependency inference.Open tool

CRA Scope Checker

LIVE

Explore applicability, role, candidate classification and dates.

Reuses the existing source-linked CRA rule engine. Indicative, not certification.Open tool

CRA Evidence Checklist

Record available, missing and unknown preparation evidence.

Interactive preparation aid, not a complete legal requirements assessment.Open tool

CVE Lookup

Explore how a source advisory becomes an applicability decision.

Synthetic DEMO advisory only. Live public CVE retrieval is PLANNED.Open tool

Firmware Metadata Inspector

LIVE

Calculate a local file hash and explore a sample release context.

LIVE: local SHA-256 and byte size only. Binary component identification is PLANNED.Open tool

Certificate Doctor

LIVE

Existing public certificate fields and date checks. Chain validation remains NOT_VERIFIED.

Decode a public certificate