Inventory — Task guide
Building Your First CBOM
A step-by-step walkthrough with a directory of accredited scanners and platforms.
Step 1: Inventory
Catalog all cryptographic algorithms, libraries, and dependencies in use across internal code, third-party libraries, and vendor software.
Step 2: Automate Discovery
Build discovery into CI/CD so new cryptographic code is caught automatically.
Recommended Tools
- Open-source: CycloneDX CBOM tooling
- Enterprise: commercial cryptographic discovery platforms
Step 3: Keep It Current
A CBOM is only useful if it stays up to date — schedule regular re-scans.