Services

---

Organizations, like Google, are preparing for the Post-Quantum Crypto era (PQC) by going beyond digital signatures applied to their software to using Public Trust Infrastructure (PTI) Trust Registries to verify trusted products, to avoid risks such as stolen signing keys used by cyber criminals to distribute malicious software apps.

Now, every product manufacturer can follow Google's lead by registering their "trusted products" in the SAG-CTR Public Trust Infrastructure (PTI) Trust Registry where anyone across the globe can check for "trusted products" and other real-world objects like IoT devices, digital certificates, apps in app stores and open-source products, like curl 

BCG is making this new service available to all product manufacturers for $10,000 annually allowing them to place their trusted product labels into SAG-CTR where anyone in the public can answer the question "Is this product trusted?" in less than one second. Just like Google's Transparency Ledger to check trust in Android products.

This service comes with an unlimited number of free consumer inquiries to check trust, saving manufacturers on support costs while providing greater customer support value.

Each posted label comes with a processing and handling fee of $200/annually. 

Now, every product manufacturer can prepare their products for the PQC era by registering their "trusted products" in SAG-CTR giving consumers and prospects the ability to verify trust, as part of the movement to "Never trust, always verify" using SAG-CTR.

Fill out the contact form to learn more about SAG-CTR Trust Services.

The Software Assurance Guardian (SAG™) Community Trust Registry (SAG-CTR™) provides BCG customers with the ability to preserve tamper-proof evidence of their SAG-PM proactive risk assessment controls in the SAG-CTR evidence locker to comply with the new SEC cybersecurity rules that go into effect in December 2023 and protect Officers and Directors from potential shareholder lawsuits in the event of a material cyber-incident, like ransomware. 

Consumers register their trust in a software package based on the combination of Software Supplier Name and a digital signature applied to a software package, by an authorized signing party, on behalf of the software supplier.  A BCG customer can query the SAG-CTR™ to view the list of trusting parties for a particular software package, software supplier and authorized signing party.  The more parties that trust a software package, the higher the trust a customer can have that the package is trustworthy, expressed as a SAGScore™, a concept similar to a FICO score, but for software trustworthiness. A higher SAGScore™ indicates higher trust in a software product. Software products that accumulate a critical mass of trust declarations in SAG-CTR™ are eligible to receive the SAG-STAR™ seal of approval, showing broad community trust in their software product.  SAG-CTR™ is part of The Public Trust Infrastructure (PTI) Trust Registry collection described in the SAG™ patent  on file with the US Patent and Trademark Office application US11,374,961 as a "List of Trusted Software Objects"

Business  Cyber Guardian is pleased to announce a new money back guaranteed  service offering, FDA 524B-small beginning July 11, 2025 to help Medical Device  Manufacturers comply with FDA final guidelines requiring NTIA compliant  SBOM's, Vulnerability Disclosure Reporting (VDR) for CISA KEVs, and  Support Status information as part of an FDA application    per the June 27, 2025 FDA Final Guidelines. including the February 3, 2026 cybersecurity requirements published by FDA

This service offering includes the following items:

1. An NTIA SBOM artifact containing baseline attributes required by FDA guaranteed to pass online validation
2. A baseline NIST Vulnerability Disclosure Report (VDR) based on NIST SP 800-161r1 RA-5 specifications listing CISA KEV status for each SBOM component CVE reported following FDA Cybersecurity requirements published February 3, 2026
3. A skeleton Vendor Response File (VRF) containing Support Status and Commercial Status information along with other information, such as a cybersecurity label identifier link, based on IETF SCITT hackathon demonstration.
4. A free SAG-PM final report (PDF) based on final artifacts produced by the medical device manufacturer and publication of an online cybersecurity label in SAG-CTR per FDA labeling recommendations. 

Microsoft CoPilot provides a complete analysis of this service offering ability to satisfy FDA February 3, 2026 requirements

All for as low as $5,000 USD for a small cyber device with a money back guarantee that the delivered SBOM will pass an online validation test and a NIST SBOM Vulnerability Disclosure Report will properly identify any CISA KEVs at the SBOM component level.

Complete the contact form to learn more about the FDA 524B-small service offering.

Example service offering artifacts are available here