Observed arrival · 2026-09-05
SBOMClock Starts the 24-Hour Vulnerability Clock
A focused compliance monitor that checks shipped dependencies against actively exploited vulnerabilities and prepares draft ENISA notifications.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
Field notes
The service accepts dependency lockfiles directly, avoiding source-code or repository access, then builds a component inventory and compares it with the CISA Known Exploited Vulnerabilities catalogue. Its stated output is an affected product/version report plus a pre-filled ENISA Article 14 warning for human review. The page says checks currently rerun every few days, while GitHub connection and continuous real-time monitoring remain planned features.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue