Skip to content
Hermes Codex

Hermes My Stack: Private SBOM & Temporal Risk Trajectory Analyzer

💻 My Stack Interactive Workbench

Section titled “💻 My Stack Interactive Workbench”

Drop or paste your software inventory manifest below. Hermes will instantly resolve software components, compute your Stack Hermes Threat Score (HTS), detect Critical Risk Accelerations, and project multi-component MITRE attack chains:

🛡️ Zero-Server Sovereign Privacy Guarantee

Zero-Server Privacy Guarantee: Your software bill of materials and proprietary code manifests never leave your device. All parsing, vulnerability resolution, and attack path graph traversals run 100% client-side.

100% IN-BROWSER ZERO-KNOWLEDGE SBOM ENGINE

Hermes SBOM Risk Analyzer

Evaluate CycloneDX & SPDX manifests locally in your browser. Uncover real-world weaponization, MITRE attack paths, and certified safe target versions without transmitting a single byte to any server.

📋

Drop your CycloneDX or SPDX JSON manifest here

or browse files from your computer (.json format supported)

Instant Demo Presets:

1. The Five Stages of My Stack Intelligence

Section titled “1. The Five Stages of My Stack Intelligence”

As defined in Section 19 of the Hermes Strategic Master Plan, My Stack operationalizes a 5-tier evaluation pipeline entirely inside your local browser runtime:

MY STACK MANIFEST (CycloneDX / SPDX / Manual)
       │
       ▼
1. ENTITY RESOLUTION
   Deterministic CPE, PURL & Product alias lookup against Hermes Software Intelligence
       │
       ▼
2. TEMPORAL TRAJECTORY CORRELATION
   Cross-references active CVEs against the Hermes Trajectory Engine (HTR-2.0)
       │
       ▼
3. RISK ACCELERATION & INFLECTION DETECTION
   Flags components with Critical Acceleration (CISA KEV, functional weaponization)
       │
       ▼
4. MULTI-COMPONENT ATTACK GRAPH
   Synthesizes perimeter-to-secrets exploit chaining across component boundaries
       │
       ▼
5. PRESCRIPTIVE OPERATIONAL DECISIONS
   Generates actionable playbooks (PATCH, MITIGATE, ISOLATE) with certified clean target versions

2. Core Value: Why Temporal Stack Analysis Matters

Section titled “2. Core Value: Why Temporal Stack Analysis Matters”

Standard Software Composition Analysis (SCA) scanners generate hundreds of static alerts based on raw CVSS scores, creating alert fatigue. Hermes My Stack introduces Temporal Risk Intelligence:

⚡ Temporal Trajectory Delta

Prioritizes vulnerabilities whose risk is accelerating in the wild right now over high-CVSS flaws that remain purely theoretical.

🚨 KEV & Exploitation Precedence

Surfaces components with actively exploited flaws (CISA KEV) that expose your infrastructure to imminent automated botnets.

🎯 Prescriptive Remediation Targets

Recommends certified clean software versions that eliminate the vulnerability while minimizing breaking architectural changes.

🔒 Total Confidentiality

Audits run locally in memory without API tokens or network transmission of your manifest, satisfying stringent corporate compliance requirements.

3. Programmatic & CLI Integration

Section titled “3. Programmatic & CLI Integration”

Need to run My Stack assessments inside your CI/CD pipeline or export reports for enterprise audits? You can leverage our deterministic REST endpoints:

Terminal window
# Fetch the complete Hermes Software Intelligence product registry
curl -s https://hermescodex.io/api/software/products.json


# Fetch the global temporal trajectory index
curl -s https://hermescodex.io/api/trajectories/index.json