CraftifactSoluForge
|
InvisiRisk Build Application FirewallInvisiRisk
|
|||||
Related Products
|
||||||
About
Craftifact is a European artifact repository SaaS for software teams that need reliable package distribution together with supply-chain visibility. It provides hosted, proxy, and group repositories for Maven, npm, Python, OCI/Docker, and Go, with browser-based artifact metadata and repository management. CycloneDX SBOMs can be uploaded and, for selected hosted content, generated and linked to artifacts or OCI digests. Teams can inspect dependencies and review vulnerability, license, exposed-secret, and policy signals close to the affected artifact. Access is controlled through OIDC, RBAC, groups, robot accounts, and scoped tokens, with APIs for CI/CD and evidence workflows. Craftifact is operated in Europe by a German company under EU jurisdiction and includes managed updates, monitoring, backups within plan scope, and predictable non-seat-based pricing. It supports CRA-relevant technical preparation but does not replace legal or conformity assessment.
|
About
Just as a Web Application Firewall (WAF) is designed to protect web servers, a Build Application Firewall (BAF) is purpose-built to protect CI/CD pipelines and build systems. A BAF understands the protocols and communications patterns used within build environments, enabling real-time validation and enforcement of security policies.
Operating as a real-time broker for CI/CD communication, a BAF can enforce policy over build-time behavior such as network access, dependency retrieval, secrets usage, and artifact creation. This helps prevent tampering, data exfiltration, and malicious code injection while also providing evidence for policy compliance.
|
|||||
Platforms Supported
Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook
|
Platforms Supported
Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook
|
|||||
Audience
Software vendors, SaaS companies, product manufacturers, and Platform, DevOps, DevSecOps, and application security teams that manage private packages or container images and need SBOM-connected dependency, vulnerability, license, access-control, and CRA-relevant evidence workflows. Particularly relevant for European organizations and teams with EU data-protection or software supply-chain requirements.
|
Audience
Healthcare, Finance, Government, Electric Utilities, Critical Infrastructure, Oil & Gas, CI/CD Pipeline Security
|
|||||
Support
Phone Support
24/7 Live Support
Online
|
Support
Phone Support
24/7 Live Support
Online
|
|||||
API
Offers API
|
API
Offers API
|
|||||
Screenshots and Videos |
Screenshots and VideosNo images available
|
|||||
Pricing
€99/month
Optional add-ons and annual discount available.
Free Version
Free Trial
|
Pricing
$2500
Free Version
Free Trial
|
|||||
Reviews/
|
Reviews/
|
|||||
Training
Documentation
Webinars
Live Online
In Person
|
Training
Documentation
Webinars
Live Online
In Person
|
|||||
Company InformationSoluForge
Founded: 2025
Germany
craftifact.com
|
Company InformationInvisiRisk
Founded: 2024
United States
www.invisirisk.com
|
|||||
Alternatives |
Alternatives |
|||||
|
|
||||||
|
|
|
|||||
|
|
||||||
Categories |
Categories |
|||||
Integrations
No info available.
|
Integrations
No info available.
|
|||||
|
|
|