NextGenRails™

This page. The hub for everything NextGenRails builds — live Bitcoin block height, timestamp, and links to every live product below.

Accepts CycloneDX and SPDX manifests. Builds a binary Merkle tree from component hashes, generates a SHA-384 digest, and issues an RS256-signed JWS receipt as tamper-evident proof. The Advanced tier cross-checks components against OSV, NVD, and GHSA with EPSS exploit scoring. Every receipt is independently verifiable against the public key without contacting NextGenRails. Zero retention. Anchored to Bitcoin block 950251.

Free, open-source cryptographic archive of software package snapshots. SHA-384 fingerprints each version and anchors captures to Bitcoin — a pre-incident record of what a package looked like at a point in time. Coverage grows from real usage. AGPL-3.0.

Accepts ISO 20022 financial message payloads. Constructs Merkle-committed SHA-384 digests and issues RS256/JWS receipts proving message integrity at a specific point in time. Built for DORA compliance and real-time settlement verification.

$199 CUI scoping and identification toolkit for federal contractors navigating CMMC Level 2 certification. Includes a 15-section reference guide, COPR decision framework, all 110 NIST SP 800-171 Rev 2 controls, CUI inventory templates, system boundary scoping worksheets, NARA CUI registry reference, third-party flow-down worksheets, destruction checklists, and a completed SSP CUI section example.

Accepts legal instruments, regulatory filings, and compliance attestations. Generates SHA-384 Merkle-committed RS256-signed JWS receipts with timestamped provenance. Receipt ID format: NGR-SR-[timestamp]. Stripe-integrated. Supports DORA (EU 2022/2554), NIS2, EU Cyber Resilience Act, CMMC 2.0, SEC Cybersecurity Rules, and UK Cyber Security & Resilience Bill.

The definitive public resource for understanding the Cryptographic Bill of Materials protocol. Explains the categorical difference between an SBOM (a claim) and a CBOM receipt (proof). Covers SHA-384 Merkle commitment, RS256 JWS signing, zero-retention architecture, regulatory alignment across EU CRA, CMMC 2.0, DORA, and NIS2, and the full cryptographic proof chain. Includes the NextGenRails™ CBOM Protocol White Paper.

Where serious builders get discovered. A community platform built for builders who ship — and the people who matter come to find what is next first.

REST API for cryptographic ISO 20022 message validation. Submit a JSON message via POST endpoint. Receive a SHA-384 Merkle-committed, RS256-signed JWS receipt proving message integrity at a specific point in time. Independently verifiable offline with a public key — no callback, no registry, no dependency on NextGenRails after issuance. Zero retention architecture. Supports pain, camt, and pacs message families.