Why KONFORMA
Keep assessments traceable as products change.
KONFORMA connects release changes with the affected security assessments and their evidence. Your team sees the reason, reviews the decision and shares selected proof.
| Capability | Typical vulnerability scanner | Point-in-time assessment | KONFORMA |
|---|---|---|---|
| Finds vulnerabilities | ✓ | ✓ | ✓ |
| Tracks release changes | Limited | At assessment time | Continuous |
| Keeps decision reasoning | Limited | ✓ | ✓ |
| Detects when the decision basis changed | — | — | ✓ |
| Shows what needs review again | — | Manual | ✓ |
| Reuses decisions across releases with approval | — | Manual | ✓ |
| Links supplier evidence to dependent decisions | — | Manual | ✓ |
Per release. Throughout its support period.
Firmware 2.4 may still be in the field when 3.1 ships. Each version keeps its own inventory, vulnerabilities and decisions. An Evidence Pack records the state when it is generated; monitoring continues.