CRA, NIS2 (Germany) and GDPR reporting deadlines, tracked from the moment you know.
BitHive Reporting Desk checks your SBOMs for actively exploited vulnerabilities, tracks the deadline of every reporting obligation that applies to you, alerts your team and prepares the text of each report. You submit the reports yourself.
Modules from €39 a month. Add a payment method when you order, a reminder at least seven days before the first charge, cancel online. Businesses only. All prices plus VAT.
- Early warning
- 24 h
- Notification
- 72 h
- Final report
- 14 days after a fix
Modules
At a glance
- Hourly checks for actively exploited vulnerabilities (CISA KEV, ENISA EUVD), matched with OSV advisory data to npm, PyPI, Maven, Go and NuGet components
- Alerts by e-mail to the contacts you name and to Slack, Microsoft Teams or a signed webhook, with escalation to a named backup
- Hosted in Germany
Monitoring, escalation and proof, on your own SBOMs.
Two exploitation sources, matched to your components
Every hour, each monitored release is checked for actively exploited vulnerabilities listed by CISA KEV and ENISA EUVD, matched with OSV advisory data to its npm, PyPI, Maven, Go and NuGet components. Up to 25 monitored releases per product.
Alerts that reach a second person
Alerts go by e-mail to the contacts you name and to Slack, Microsoft Teams or a signed webhook; if nobody has opened or acknowledged the case two hours after its clock started, your named backup is alerted as well.
The record of when you knew
Each case runs the Article 14 clocks and keeps an append-only audit trail of who knew what, when. Uploads, case records and the audit trail can be downloaded as files at any time.
From SBOM to report draft in three steps.
Upload your SBOMs.
CycloneDX or SPDX JSON, in the web interface or through the API.
Get the alert with the clock running.
A match opens a case; its Article 14 deadlines are computed from the awareness time and shown in UTC.
Copy the report text.
Report drafts with the single reporting platform’s fields and field limits, each field ready to copy. You submit to ENISA yourself, and the submission time and reference are recorded.
A case in the Reporting Desk
Plans by number of products.
CRA Starter €149, Team €449, Business €990 a month, for 3, 10 or 25 products. Yearly billing: 12 months for the price of 10. Enterprise by quote, from €12,000 a year.
For businesses only. All prices plus VAT.
Trust
The application and customer data are hosted in Germany (Hetzner). We work from the SBOMs you upload; we never see your source code.
Security and sub-processorsYour first thirty minutes
Sign in, name who gets alerted and who backs them up, add a product, upload an SBOM.