BitHive Reporting Desk

Step 1 of 6

Set up

Sign in with a link sent by e-mail, accept the Terms and the data processing agreement, name who gets alerted, connect Slack, Microsoft Teams or a webhook, and add your product. Four roles: Owner, Administrator, Member, Viewer.

Step 2 of 6

Upload SBOMs

Upload your SBOMs in CycloneDX or SPDX JSON through the web interface or the API, with upload tokens limited to one product. Up to 25 monitored releases per product.

Step 3 of 6

Alert

Every hour, each monitored release is checked for actively exploited vulnerabilities listed by CISA KEV and ENISA EUVD, matched with OSV advisory data to its npm, PyPI, Maven, Go and NuGet components.

Alerts go by e-mail to the contacts you name and to Slack, Microsoft Teams or a signed webhook.

Choose per channel: every alert, only the urgent ones, or only when a case opens.

Step 4 of 6

Case and clocks

The Article 14 clocks for actively exploited vulnerabilities and severe incidents are computed from the time you became aware and shown in UTC. Each case keeps an append-only audit trail of who knew what, when: the alert, who opened it and who acknowledged it.

Step 5 of 6

Report draft

Guided forms prepare the text of each report with the fields and field limits of ENISA’s single reporting platform (ENISA SRP glossary v1.4 of 1 October 2026), and each field can be copied on its own. You submit it to ENISA yourself, and the submission time and reference are recorded.

Step 6 of 6

Export

Download everything: one archive with your account data, every document as it arrived, the findings, the cases with their deadlines and reports, and the complete audit trail.