Audience
Organizations preparing for post-quantum cryptography migration that need an inventory of the cryptography in use across their own estate, including offline networks.
About RaptorGRC CBOM
RaptorGRC CBOM is a self-hosted cryptographic discovery and inventory tool for organizations preparing for post-quantum cryptography migration. It scans TLS and SSH endpoints, web URLs entered manually or imported from CSV, and Windows or Linux certificate stores. It also reads Windows SCHANNEL and Group Policy settings and Linux crypto-policies, OpenSSL and sshd configuration. The software inventories certificates, keys, protocols and algorithms, identifies weak or quantum-vulnerable cryptography, and exports a signed CycloneDX 1.7 cryptographic bill of materials. Teams can group assets by service, record data sensitivity and retention needs, prioritize migration, compare scan runs, and generate board readiness, NCSC 2028 discovery, remediation and OMB M-23-02 reports. It runs as a Linux-hosted container, works offline, and supports SQLite, PostgreSQL or SQL Server. The current beta is for evaluation, not production use.
Other Popular Alternatives & Related Software
CLEAR
The CLEAR™ Cryptosystem is a FIPS-140-3 Validated programmable state-of-the-art encryption SDK for securing files, streaming video, databases, and networks. Compatible with all types of modern computer platforms, CLEAR™ is an easy to integrate, turn-key tool for boosting existing cybersecurity with Post Quantum (PQC) strength.
Apply CLEAR™ Cryptosystem anywhere you want to secure data in your own digital ecosystem. CLEAR™ is a single file with a smaller footprint than a single image on a smart phone. It can be deployed online or offline and works on more than 30 types of modern operating systems and embedded equipment. Designed for maximum efficiency and simplicity, CLEAR can dramatically reduce energy usage at scale, relative to other legacy cryptography.
Learn more about CLEAR
QuSecure QuProtect
QuSecure's QuProtect is a comprehensive post-quantum cryptography software solution designed to secure data across various platforms, including network, cloud, IoT, edge devices, and satellite communications. It offers quantum-resilient cryptography, crypto-agility, zero-trust architecture, and quantum-strength keys, ensuring protection against both current and future cyber threats. QuProtect enables organizations to implement PQC with minimal disruption to existing systems, providing a seamless integration into their cybersecurity infrastructure. It supports hybrid post-quantum TLS, allowing for control over cryptographic algorithms and key management, and offers centralized control and management for cryptographic protocols across the network. QuProtect is deployed as a quantum-security-as-a-service architecture, combining orchestration, inventory, telemetry, and cryptographic controls into a single platform.
Learn more about QuSecure QuProtect
SandboxAQ
The emergence of large, fault-tolerant quantum computers poses a significant threat to current public-key cryptography, leaving sensitive data and systems vulnerable to attacks. SandboxAQ was selected by the NIST's National Cybersecurity Center of Excellence for its Migration to Post-Quantum Cryptography project, which partners with industry to help the government develop best practices to transition from current public-key cryptography to post-quantum cryptography algorithms. Easily adhere to new cryptographic requirements and switch between them without requiring additional development or maintenance. Application Analyzer detects and records all calls to cryptographic libraries made by an application at run time, identifying vulnerabilities and policy breaches.
Learn more about SandboxAQ
PQShield
PQShield offers a comprehensive suite of post-quantum cryptography solutions designed to future-proof digital infrastructures against the emerging threats posed by quantum computing. Their UltraPQ-Suite encompasses a range of hardware and software products optimized for various use cases, including ultra-fast, ultra-small, and ultra-secure implementations. PQShield's offerings include PQPlatform-Lattice, a compact, FIPS 140-3 CAVP-compliant cryptographic engine supporting lattice-based algorithms like ML-KEM and ML-DSA; PQPlatform-CoPro, which combines hash-based and lattice-based cryptography engines for seamless integration into existing security subsystems; and PQPlatform-TrustSys, a fully autonomous, PQC-focused root-of-trust subsystem designed for minimal integration effort and robust side-channel protection. PQCryptoLib provides a general-purpose cryptographic library supporting both post-quantum and classical algorithms, facilitating smooth transitions to quantum systems.
Learn more about PQShield
Pricing
Starting Price:
$0
Pricing Details:
Free to install and run on infrastructure you control for internal organizational use. The current beta is for evaluation, not production use.
Free Version:
Free Version available.
Integrations
No integrations listed.
Company Information
Biff Labs Ltd
Founded: 2026
United Kingdom
raptorgrc.com/products/cbom
Videos and Screen Captures
Other Useful Business Software
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Product Details
Platforms Supported
Linux
On-Premises
Support
Online
RaptorGRC CBOM Frequently Asked Questions
Q: What kinds of users and organization types does RaptorGRC CBOM work with?
RaptorGRC CBOM works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does RaptorGRC CBOM support in their product?
RaptorGRC CBOM supports these languages: English.
Q: What kind of support options does RaptorGRC CBOM offer?
RaptorGRC CBOM offers support via online.
Q: How much does RaptorGRC CBOM cost?
Pricing for RaptorGRC CBOM starts at $0.
