RAVEN

RAVEN is a full-lifecycle Risk Management Framework and vulnerability management platform for DoD program offices, defense contractors, and federal agencies. It consolidates scanning, compliance authoring, ATO tracking, continuous monitoring, PKI, and signed air-gapped updates into one on-premises product.

NIST RMF (SP 800-37), NIST SP 800-53 rev 5, NIST SP 800-171, the NIST Cybersecurity Framework, CMMC 2.0, FedRAMP, CNSSI 1253, DISA STIG/SRG, FIPS 140-3 (capable via the OpenSSL FIPS provider), and CycloneDX 1.5 SBOM.

Yes. Air-gap operation was part of RAVEN’s design from day one. Updates and threat feeds are delivered as signed offline packages, verified on import and applied without any internet connectivity.

Upload the signed license file through the setup wizard or the Settings page. The license is verified locally - no internet connection or license server is required.

New installations start with a 14-day evaluation that includes core scanning and compliance monitoring with capacity limits (up to 25 targets, 5 agents, 3 users, 1 concurrent scan). Scheduled scans, eMASS export, SBOM generation, and SSP/SAR artifact generation are disabled during evaluation. After 14 days, RAVEN enters a locked read-only state until a license is applied - no data is lost.

Use the Request a Demo button above or email info@glacierbytetechnology.com. Our team typically responds within one business day and can arrange a pilot on your network.