ARIANNA Platform

The SBOM & Vulnerability Management Platform

Designed by Experts

Start Now

Customer Confidence

ARIANNA
Leads the way

The cybersecurity landscape is complex to navigate, like a labyrinth: ARIANNA’s goal is to show you the way. Thanks to the intuitive platform design, it becomes possible to handle product security and compliance with confidence and ease.

Your Benefits

Keep your devices secure

in the most optimal way: save time & reduce cost

vecteezy_illustration-of-a-woman-doing-a-presentation-or-training-to_6230325-1.jpg

Reach compliance

faster and with ease:
SBOM & VMP in line with all major regulations

Obtain accurate results

with our proven process: protect both hardware and software

ARIANNA is a product security management platform for connected devices and systems. Built upon the principles of a robust vulnerability management process, ARIANNA supports device manufacturers to identify, triage, address and report vulnerabilities.

The aim of vulnerability management is not to reach zero vulnerabilities. The aim is to gain visibility into the vulnerabilities and keep them under control. Manage risk according to your use case and the product’s intended environment.

ARIANNA analyzes build artifacts to obtain the most accurate Device Model. The Device Model is a complete list of components, both hardware (Hardware Bill of Materials - HBOM) and software (Software Bill of Materials- SBOM).

ARIANNA’s clear user interface helps device manufacturers understand and prioritize vulnerabilities. Our platform helps the user to make informed decisions by considering the risk a vulnerability will be exploited in their specific system.

Power up your product security

Experience based

Human-centered

Robust

A compliance journey
Regulations and Standards

The right fit for your industry

Medical

IEC 81001

FDA Pre-Market Submission MDR (EU 2017/745

Industrial Automation & Control Systems (IACS)

ISA/IEC 62443

Automotive

ISO/SAE 21434

UN R155 and R156

Consumer Electronics

ETSI EN 303 645

UK PSTI Act

SBOM is an important artifact requested by various regulations and standards. Creating, maintaining and sharing SBOMs are important practices to improve supply chain transparency.

Our SBOMs are compliant with all main regulations and standards.

Our SBOMs are compliant with all main regulations and standards. The SBOM is downloadable in machine-readable formats such as CycloneDX and SPDX. In addition, the SBOM stays up to date with any software versioning changes or component removal/additions.

ARIANNA is unique
Our differentiators

Designed by cybersecurity experts

ARIANNA is born out of a clear need for vulnerability management, witnessed firsthand. Security Pattern’s cybersecurity experts noticed this while providing consultancy services to device manufacturers around the globe. ARIANNA has been developed by experts and side by side with the final user: device manufacturers who wish to get more grip on product security.

We don’t ignore vulnerable hardware

Security is a combination of hardware, software and procedures. Even though the increased focus on SBOM is a great step toward supply chain security and transparency, it is not enough. Hardware can be vulnerable too. We propose hardware mitigations when the product is already on the market. While during the development of a product, HBOMs and related vulnerabilities can lead to design adjustments.

We build the most accurate Device models

To obtain all the components a device consists of, we analyze artifacts coming from the build procedure. We don’t need access to source code, nor do we perform binary analysis. We optimized the Device Model Creation process to be non-intrusive and extremely accurate, minimizing wasting time on false positives.

"Customers are facing a wide variety of cybersecurity challenges, due to increased connectivity, technological developments, and emerging regulations. Product security and compliance are complex to navigate, like a labyrinth: our platform's goal is to show you the way. The ARIANNA platform has been developed by experts and side-by-side with the final user, a unique combination that results in an incredible, robust, and innovative product for device manufacturers."

Guido Bertoni
CEO, Security Pattern

Your Complete Solution
Key Features

SBOM/HBOM Management

Insights into all your components at risk.

Get accurate insight into all the components present in your product, both third-party and proprietary components. ARIANNA is unique because it monitors both software and hardware components. By using ARIANNA platform, your SBOM and HBOM always stay up to date, even after changes to the software stack or after addition/removal of components. Automate maintenance by using APIs or manage it directly on the platform.

Continuous vulnerability monitoring

Find vulnerabilities faster.

Manage identified vulnerabilities using a robust vulnerability management process. ARIANNA shows all the identified vulnerabilities, and gives remediation and mitigation options. Assign a status to each vulnerability and keep track of all open and closed vulnerabilities. Assign a policy to each project, view vulnerability deadlines and close vulnerabilities in time.

Assisted Prioritization

Focus on the most urgent issues first and save time with our exploit intelligence.

Assisted prioritization using our proprietary engine reduces the vulnerabilities to be analyzed by an order of magnitude or more. In addition, ARIANNA provides all relevant information to assess vulnerabilities, such as available exploits, severity, and EPSS score. We highlight four levels of exploit maturity, including actively exploited vulnerabilities from CISA’s KEV. Use this information to prioritize vulnerabilities efficiently.

Comprehensive Cybersecurity Reports

Gain effortless compliance.

Satisfy requirements from standards and regulations in your industry such as FDA pre-market application, IEC 62443, ISO/SAE 21434, ETSI 303 645, RED, IEC TR 60601-4-5, UL2900 and MDR EU 2017/745.

Policy Management

Never miss a deadline by visualizing vulnerabilities timeline.

Make sure you address vulnerabilities within their required time frame. Those policies can come from your internal company policy or external regulations or standards. Receive a notification if a vulnerability is approaching its deadline.

Vulnerability Remediation Guidance

Fix faster.

Review available mitigations and fixes using the original source URLs. This can significantly speed up the time to address a vulnerability.

Want to see the ARIANNA platform in action? Contact us to schedule a one-hour demo and discussion of your specific use case.

Just a question? Don’t hesitate to reach out, and we will get back to you shortly.

Discover our Resources:

Download the Brochure

A software bill of materials (SBOM) has become a key element in supply chain security. This list of software components used within a device or system is a topic high on the agenda among regulators, security professionals, and manufacturers.

Discover more about SBOM