11
Key Facts
- SBOM straight from the control project, no fingerprinting of the running machine required
- Combine sources: PLC program, diagnostic file, network scan, ERP export, existing SBOM
- Runs offline on the engineering PC; project files never leave your network
Categories
Vulnerability and patch management Managed security services Compliance / GRC (products and services) Threat analysis Consulting IT security Data protection, data security Security management Risk analysis and management Asset management / IT documentation
Product information
From December 2027, the Cyber Resilience Act requires a software bill of materials for every product with digital elements. For machine builders that means controllers, drives, I/O modules, HMIs and the firmware running on them all have to be captured and kept up to date. Tools from software development are of little help here, because a controller does not expose a file system, it gives you an engineering project file.
That is exactly where the Complioty Scanner comes in. It reads the control project, for example from the TIA Portal, and enriches it with further sources: diagnostic files, network scans, exports from ERP or version control, or SBOMs you already have. From every source it builds one SBOM per machine or per assembly, flagging missing details rather than letting ...