Snapshot Audit

Resultaat binnen 48 uur

Een complete technische analyse van uw Linux build tegen de CRA Essential Requirements. Geen consultancy uren, geen juridisch jargon - enkel harde technische feiten.

Wat u ontvangt

1. SBOM Extractie & Validatie
Automatische generatie van SPDX 2.3 compliant Software Bill of Materials uit uw build artifacts. Inclusief dependency graph analyse en license compliance check tegen CRA Annex I vereisten.
2. CVE Impact Analyse
Contextuele kwetsbaarheidsanalyse: wij bewijzen welke CVE's niet exploiteerbaar zijn in uw specifieke configuratie. Filtering op basis van kernel config, disabled services en build-time hardening flags.
3. Annex I Compliance Matrix
Mapping van uw build configuratie tegen alle 14 Essential Requirements uit CRA Annex I. Per requirement een technische gap analysis met concrete remediation paths.
4. Secure Boot & Attestation Check
Verificatie van bootloader signing, kernel lockdown mode, TPM integration en measured boot capabilities. Compliance status voor CRA Article 13 supply chain security requirements.
5. Update Mechanism Audit
Technische beoordeling van uw OTA update architectuur: signing verification, rollback protection, delta update support en failure recovery mechanisms conform CRA Article 10.
6. Executive PDF Report
Gestructureerd 25-35 pagina rapport met management samenvatting, technische bevindingen, priority roadmap en concrete time-to-compliance estimaties per gap.

€2.495

Eenmalige investering, geen verborgen kosten

Delivery Guarantee

Volledige analyse binnen 48 werkuren na ontvangst van build artifacts en configuratie data.

Contactgegevens

Build Systeem

Product Context

Security Features

Build Artifacts

Aanvullende Context

Mutual Non-Disclosure Agreement

By proceeding with this Snapshot Audit request, both parties hereby acknowledge and agree to maintain strict confidentiality regarding all technical specifications, build artifacts, proprietary methodologies, and business information exchanged during the engagement.

LEONA Compliance BV commits to:

  • Treating all submitted materials as proprietary and confidential
  • Restricting access to authorized personnel only on a need-to-know basis
  • Implementing industry-standard security measures for data storage and transmission
  • Refraining from disclosure to third parties without prior written consent
  • Permanently deleting all artifacts within 90 days post-delivery unless otherwise instructed

This mutual confidentiality obligation shall survive termination of services and remain in effect for a period of five (5) years from the date of disclosure.

Na betaling ontvangt u binnen 1 werkdag een intake call om artifacts over te dragen. Volledige analyse binnen 48 werkuren.