Full-Spectrum CycloneDX 1.6 xBOM Coverage
You can import or generate CycloneDX 1.6 bills of materials across every component type in your environment, rather than limiting inventory to open-source libraries:
CBOM (Cryptography) & ML-BOM (AI Models)
Track cryptographic algorithms, key sizes, OIDs, and post-quantum readiness alongside machine learning model architectures, weights SHA-256 digests, and base datasets.
SaaSBOM, HBOM, OBOM & VEX
Record external API dependencies and trust-boundary crossings (SaaSBOM), hardware/firmware modules (HBOM), container base images (OBOM), and exploitability assertions (VEX).
Scheduled Retrospective Threat Matrix
A package that passed every check when your pipeline ran two months ago can be compromised or added to CISA KEV today. BlackShield runs a scheduled background job every 15 minutes (and supports instant on-demand checks) that compares your stored BOM inventory against live threat intelligence feeds.
Every match creates a finding in your posture inventory and raises an urgent alert in the SOC queue so your team knows which historical pipeline run and published container or binary need to be rebuilt and rotated.
API & CLI Endpoints
| Endpoint | Purpose |
|---|---|
| POST /api/v1/sbom/import | Ingest CycloneDX 1.4/1.5/1.6 xBOM JSON with pipeline provenance |
| GET /api/v1/sbom/export | Export tenant inventory as a CycloneDX 1.6 JSON document |
| GET /api/v1/sbom/threat-matrix | Retrieve retrospective SBOM × Threat-Intel matches and narratives |
| POST /api/v1/sbom/threat-matrix/evaluate | Run an immediate correlation check across all stored BOM components |