RAVEN

RAVEN is an end-to-end Risk Management Framework and vulnerability management platform for DoD program offices, defense contractors, and federal agencies. It consolidates scanning, compliance authoring, ATO tracking, continuous monitoring, PKI, and signed air-gapped updates into one on-premises product.

NIST RMF (SP 800-37), NIST SP 800-53 rev 5, NIST SP 800-171, the NIST Cybersecurity Framework, CMMC 2.0, FedRAMP, CNSSI 1253, DISA STIG/SRG, FIPS 140-3 (capable via the OpenSSL FIPS provider), and CycloneDX 1.5 SBOM.

Yes. Air-gap operation was part of RAVEN’s design from day one. Updates and threat feeds are delivered as signed .raven and .raven-data packages, verified on import with Ed25519 signatures and auto-applied through a staged pipeline. No internet connectivity is required.

Upload the signed .raven-license file through the setup wizard or the Settings page. The license is verified using Ed25519 cryptographic signatures locally - no internet connection or license server is required.

New installations start with a 14-day evaluation that includes core scanning and compliance monitoring with capacity limits (up to 25 targets, 5 agents, 3 users, 1 concurrent scan). Scheduled scans, eMASS export, SBOM generation, and SSP/SAR artifact generation are disabled during evaluation. After 14 days, RAVEN enters a locked read-only state until a license is applied - no data is lost.

Use the Request a Demo button above or email info@GlacierByteTechnology.com. Our team typically responds within one business day and can arrange a pilot on your network.