CycloneDX CBOM Standard

Overview

QCecuring natively supports the CycloneDX Cryptographic Bill of Materials (CBOM) standard for representing cryptographic assets. The platform generates, imports, and exports CBOM documents in CycloneDX JSON and XML formats, enabling standardized crypto inventory exchange across tools and teams.

Key capabilities

• Generate CycloneDX CBOM documents from discovered cryptographic assets across your infrastructure.
• Import existing CBOM files from other tools for centralized analysis and policy checking.
• Export CBOM data for compliance reporting, auditing, and sharing with partners.
• Full support for CycloneDX 1.6 cryptographic properties including algorithm details, key sizes, and asset types.
• Automated CBOM generation as part of CI/CD pipelines for continuous crypto inventory.

Typical use cases

• Organizations standardizing on CycloneDX for software and cryptographic bill of materials.
• Security teams needing to exchange crypto inventory data between tools and stakeholders.
• Compliance programs requiring standardized documentation of cryptographic assets.

High-level integration flow

1. QCecuring discovers cryptographic assets across your infrastructure using its scanning modules.
2. Discovered assets are normalized into CycloneDX CBOM format with full cryptographic properties.
3. CBOM documents can be exported as JSON or XML for external consumption.
4. External CBOM files can be imported for centralized analysis and policy enforcement.
5. Automated CBOM generation runs on schedule or as part of CI/CD pipelines.