From a48e6f512a9c50f86b2facedfc247bb8b8292da3 Mon Sep 17 00:00:00 2001
From: Konstantin Kauz <konstantin.kauz@ecloud.systems>
Date: Fri, 13 Nov 2026 22:01:11 +0400
Subject: [PATCH] Add Secupipe

Signed-off-by: Konstantin Kauz <konstantin.kauz@ecloud.systems>
---
 tools/secupipe.json | 56 +++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 tools/secupipe.json

diff --git a/tools/secupipe.json b/tools/secupipe.json
new file mode 100644
index 0000000..c5722d9
--- /dev/null
+++ b/tools/secupipe.json
@@ -0,0 +1,56 @@
+{
+  "$schema": "https://cyclonedx.org/schema/tool-center-v2.tool.schema.json",
+  "specVersion": "2.0",
+  "tool": {
+    "name": "Secupipe",
+    "publisher": "Konstantin Kauz Cloud Solutions Ltd",
+    "description": "Hosted SBOM monitoring for CRA and NIS2: ingests CycloneDX and SPDX SBOMs per release from CI, continuously matches them against OSV, EPSS and CISA KEV, records VEX decisions, tracks CRA reporting deadlines and opens fix pull requests. Includes a free online SBOM check without sign-up.",
+    "website_url": "https://secupipe.com/en/",
+    "capabilities": [
+      "SBOM",
+      "VDR/VEX"
+    ],
+    "availability": [
+      "FREEMIUM",
+      "SUBSCRIPTION"
+    ],
+    "functions": [
+      "ANALYSIS"
+    ],
+    "analysis": [
+      "SECURITY_VULNERABILITIES",
+      "POLICY_EVALUATION"
+    ],
+    "transform": [],
+    "packaging": [
+      "APPLICATION"
+    ],
+    "library": [],
+    "platform": [],
+    "lifecycle": [
+      "BUILD",
+      "POST-BUILD",
+      "OPERATIONS"
+    ],
+    "supportedStandards": [
+      "CYCLONEDX",
+      "SPDX",
+      "PACKAGE_URL"
+    ],
+    "cycloneDxVersion": [
+      "CYCLONEDX_V1.6",
+      "CYCLONEDX_V1.5"
+    ],
+    "supportedLanguages": [
+      "JAVASCRIPT/TYPESCRIPT",
+      "NODE.JS",
+      "GO",
+      "PYTHON",
+      "JAVA",
+      ".NET",
+      "PHP",
+      "RUBY",
+      "RUST"
+    ]
+  }
+}