What Raven is
Raven has built a comprehensive runtime oriented ADR solution that can detect function executions from packages being exploited. This empowers them to detect application layer attacks, create prioritization based on what functions are being used, as well as virtual patching to prevent vulnerability exploitation. The vendor site is raven.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Raven covers
Raven is in the catalog for these capabilities. Categories: ADR, SCA, Container Vulnerability, and AI Security. Catalog tags: Hands-on, Best for MidMarket, and Best for Enterprise.
How to evaluate Raven in a security program
Use Raven as a stack candidate, not as diligence evidence. The oneNorma score for Raven is 6.5/10 (percentile 94). If the real gap is in ADR, SCA, Container Vulnerability, and AI Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what raven.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
