Spice Labs Solutions for Every Organization

• Spice Labs Surveyor IT Pro — Enterprise cryptographic discovery for IT application estates. Scans applications and dependencies, identifies deprecated and quantum-vulnerable algorithms and key lengths, and generates a CycloneDX Cryptographic Bill of Materials (CBOM). Runs fully air-gapped for classified and sensitive environments. Licensed per seat, annual subscription, support and maintenance included.
• Spice Labs Surveyor OT Pro — The same discovery and CBOM capability purpose-built for operational technology, industrial control, and embedded environments where agencies often have the least visibility and the longest remediation timelines. Air-gapped deployment.
• Integrations & Add-ons — CMDB integration to tie cryptographic findings to owned assets; bring-your-own-key (BYOK) service; third-party data and SBOM ingestion to extend coverage to vendor-supplied software.

Compliance & Standards Alignment

• Supports agency obligations under Executive Order 14412 and OMB Memorandum M-26-15, including cryptographic inventory and migration-plan requirements.
• CBOM output conforms to the OWASP CycloneDX standard, the format recognized for cryptographic bills of materials.
• Identifies algorithms that must be replaced under NIST's post-quantum cryptography standards (FIPS 203, 204, and 205) and flags cryptography already deprecated under existing NIST guidance.
• Air-gapped deployment options support environments with strict data-boundary and classification requirements.