{"product_id":"sbom-firmware-image","title":"Firmware SBOM — Per-Image Analysis","description":"\u003cscript type=\"application\/ld+json\"\u003e{\"@context\":\"https:\/\/schema.org\",\"@type\":\"Product\",\"@id\":\"https:\/\/www.crm-sync.dev\/products\/sbom-firmware-image#product\",\"name\":\"Firmware SBOM — Per-Image Analysis\",\"mpn\":\"sbom-firmware-image\",\"description\":\"A one-time, standards-compliant CycloneDX SBOM for a single firmware image — with the image vaulted under encryption.\",\"category\":{\"@type\":\"Thing\",\"@id\":\"https:\/\/www.crm-sync.dev\/#category-digital-compliance-add-on\",\"name\":\"Digital · Compliance Add-on\"},\"image\":\"https:\/\/cdn.prod.website-files.com\/6a4db086c210277324d0026b\/6a5e48d6f64d22b82532f92f_sbom-firmware-image.svg\",\"offers\":{\"@type\":\"Offer\",\"price\":\"250\",\"priceCurrency\":\"USD\",\"url\":\"https:\/\/www.crm-sync.dev\/products\/sbom-firmware-image\",\"availability\":\"https:\/\/schema.org\/InStock\"}}\u003c\/script\u003e\u003ch2 class=\"pdp-h2\"\u003eThe parts-list for the device itself — not just the app that pairs with it. The EU rule scopes the \u003cstrong\u003efirmware image\u003c\/strong\u003e, not only the companion app. This produces the parts-list for the image itself, and states honestly how it was made.\u003c\/h2\u003e\n\u003ch3 class=\"pdp-label\"\u003eHow it works\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eYou provide the firmware image, or the build sources.\u003c\/li\u003e\n\u003cli\u003eWe produce the parts-list — from the build system where sources exist, or by analyzing the binary where they don't.\u003c\/li\u003e\n\u003cli\u003eThe method is written into the document; best-effort binary analysis is labeled as such, never passed off as build truth.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3 class=\"pdp-label\"\u003eWhat makes it different\u003c\/h3\u003e\n\u003cp\u003eMost SBOM work covers the app and quietly skips the device firmware — the part the rule actually names. This covers the image, and is honest about how: \u003cstrong\u003ea document you can stand behind, not one that overclaims\u003c\/strong\u003e.\u003c\/p\u003e\n\u003ch3 class=\"pdp-label\"\u003eUnder the hood\u003c\/h3\u003e\n\u003cp\u003eYocto or Zephyr build-time generation, or EMBA \/ cve-bin-tool binary reconstruction; method stated in the document; the image vaulted with AES-256-GCM and an Ed25519 certificate; registry-linked to its SHA-256 provenance.\u003c\/p\u003e\u003cp\u003e\u003ca href=\"https:\/\/www.crm-sync.dev\/pages\/firmware#wizard\"\u003ePreview the vault wizard →\u003c\/a\u003e — browse the Upload, Access, SBOM, Embed, and Vault tabs before you buy; it unlocks the moment your order is paid.\u003c\/p\u003e\u003cp\u003e\u003ca class=\"crm-pstory-buy\" href=\"https:\/\/www.crm-sync.dev\/pages\/channel#wizard\"\u003eOpen the Channel Wizard →\u003c\/a\u003e\u003c\/p\u003e\u003cp\u003eMint an attributed link or QR for this product — preview it free in the modal; minting unlocks with the Channel Publish add-on.\u003c\/p\u003e","brand":"CRM Sync","offers":[{"title":"Default Title","offer_id":47238455754908,"sku":"sbom-firmware-image","price":250.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0757\/3654\/7484\/files\/sbom-firmware-image.png?v=1784511257","url":"https:\/\/www.crm-sync.dev\/products\/sbom-firmware-image","provider":"CRM Sync","version":"1.0","type":"link"}