Security
What is CSAF (Common Security Advisory Framework)?
Also known as: CSAF, VEX
CSAF (Common Security Advisory Framework) is the OASIS standard for publishing security advisories in a machine-readable JSON format, so tools can automatically tell which products and versions are affected.
Vendors publish CSAF feeds with their advisories; CSAF VEX documents state whether a product is actually affected by a vulnerability in one of its components.
How Clateway helps
- EU Cyber Resilience Act compliance – Prepare for the EU Cyber Resilience Act: product registry, SBOM quality checks, CSAF advisory matching, threat modelling, pen test and conformity evidence.