Select — Procurement
AI-powered insights translate technical risk into plain terms, screen against your standards for vulnerabilities, foreign presence, dependencies, and licensing, and surface issues early — so procurement moves without delay.
15,000+
Validated bills of materials
Fortress Vault: NAESAD
The Only Software Assurance Database Built for the Grid.
NAESAD — the North American Energy Software Assurance Database — is the energy sector’s software bill of materials repository. 15,000+ validated bills of materials, shared across the industry, so the whole grid sees software risk that no single operator could see alone.
SBOM Analysis Isn’t Optional Anymore.
Analyzing software bills of materials is essential to proactive product security. But building and scaling those workflows in-house is slow, costly, and complex — and most operators can’t do it for every product they field.
Proactive Product Security, at Scale.
NAESAD brings critical infrastructure, government, and vendors together around accessible, validated product security data. A repository of 15,000+ software bills of materials is available on demand, with streamlined workflows for creating and requesting new ones. The result: stronger protection against exploitation, a better security posture, and far lower resource demands.
Vulnerabilities at the product and component level.
Foreign influence and ownership (FOCI) risks.
Pre-procurement and deployment risks.
Compliance violations and regulatory breaches.
Risk Management Through the Product Lifecycle
NAESAD meets enterprise risk requirements through every stage of the product lifecycle.
02
Onboard — Risk & Compliance
Deployment guidance, prioritized mitigation, and supplier engagement, plus component inventory for managing supply chain incidents. Compliance stays aligned to new standards as they emerge.
03
Operate — Vulnerability Management
Component-level inventory targets the fixes that matter, ties findings to specific assets, and feeds vendor updates to incident response teams during events. Flexible on-prem deployment included.
Optimizing Product Security Workflows
Organizations struggle to implement SBOM analysis in their security workflows. With NAESAD, these operational challenges can be automated and solved.
NAESAD
-
01
Sourcing
Fortress team members source bill of materials from vendors or through methods like teardown and binary analysis.
-
02
Analysis
Fortress managed services analyze the bill of materials to identify cybersecurity risks, foreign influence, and other critical findings.
-
03
Prioritization
Using the bill of materials analysis, the findings are prioritized to enable optimal resource allocation.
-
04
Resolution
Fortress managed services can work directly with the vendor on behalf of NAESAD customers to drive corrective actions.
-
05
Monitoring
Fortress provides ongoing monitoring services for manufacturer alerts, new patch availability, and more.
Join the NAESAD Data Exchange.
Enhance supply chain security and efficiency with NAESAD — built for lifecycle resilience and measurable ROI.
Comprehensive
15,000+ SBOMs for full-lifecycle security.
Collaborative
Connects organizations and vendors for joint risk management — share once, protect many.
Conclusive
Actionable insights and resolution, delivering up to 30x ROI.
Fortress’ data exchanges eliminate redundant assessments. Instead of every organization repeating the same checks, validated assessments are shared — saving time, cutting cost, and accelerating risk management.
NAESAD — the North American Energy Software Assurance Database — is the energy sector’s software bill of materials repository. 15,000+ software validated bills of materials, shared across the industry, so the whole grid sees software risk that no single operator could see alone.
Members cut assessment time from months to seconds and reduce costs by over 50% by leveraging shared, validated vendor and asset data.
