RaptorGRC CBOM Reviews & Product Details

Free self-hosted CBOM scanner that inventories the certificates, keys, protocols and algorithms across your estate, rates quantum vulnerability and exports a signed CycloneDX 1.7 CBOM. Runs offline. Built in the UK. RaptorGRC CBOM runs as one container on your own infrastructure. It scans TLS and SSH endpoints and web URLs, reads Windows and Linux certificate stores over WinRM or SSH, and checks Windows SCHANNEL and Group Policy settings and Linux crypto-policies, OpenSSL and sshd configuration against a baseline. Group assets into services, record how long each service's data must stay protected, and get a migration priority with the reasons shown. Plan migration steps with owners and dates, and track progress against the NCSC 2028, 2031 and 2035 milestones. Reports include a board quantum-readiness summary, an NCSC 2028 discovery evidence pack, a remediation list, a comparison of two scan runs, a signed CycloneDX CBOM and an OMB M-23-02 inventory. Requires a Linux container host with Docker and SQLite, PostgreSQL or SQL Server. No connection to Biff Labs is needed. Beta: for evaluation, not production use.