Hardware Asset Registry

For organizations that make physical devices, the hardware inside a device is as important as its software. The Hardware Asset Registry lets you record the physical components of your products. It is under Settings → Hardware Registry and requires the Reporting plan or higher.

For each component you record a name, an identifier such as a MAC address or serial number, an optional producer or vendor, and an optional firmware version.

Registered components appear as the options in the affected product list on your public submission form. A researcher selects one, and the portal stores its identifier on the report.

Linking hardware components to a product

You can link each registered hardware component to a specific product. This links physical microcontrollers, boards, and modules to the digital products that contain them.

When components are linked to a product, the trust portal can offer a machine-readable Hardware Bill of Materials (HBOM) for that product in CycloneDX 1.6 JSON format. The trust portal requires the Enterprise plan.

To link a component, select a product from the Linked Product dropdown when you register the component. You can also leave the selection empty for company-wide hardware assets.