Curator Pro is a centralized platform for managing software supply chain risks and supporting compliance with the Cyber Resilience Act. It brings together SBOM lifecycle management, vulnerability tracking, license compliance, VEX, and regulatory evidence in one integrated solution.

The platform enables organizations to import, consolidate, validate, enrich, and maintain SBOMs in formats such as SPDX and CycloneDX. Software components, licenses, vulnerabilities, and dependencies are linked in a structured data model, helping teams understand where components are used across products and assess the impact of new security or compliance findings.

Curator Pro supports the continuous monitoring and prioritization of vulnerabilities, the documentation of vulnerability status through VEX, and the management of open-source license obligations. Its dedicated CRA compliance capabilities allow organizations to map regulatory controls, assign responsibilities, and connect supporting evidence such as SBOMs, vulnerability records, assessments, and audit events.

By combining technical software analysis with structured compliance documentation, Curator Pro helps manufacturers and software providers improve supply chain transparency, manage risks throughout the product lifecycle, and maintain traceable, audit-ready evidence for customers, management, and regulatory authorities.