Compliance
Customer Portal for product compliance documents
Share approved product compliance documents with named customers by product and version, with controlled access and a clear download history.
Cyber Resilience Act Blog
Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
Compliance
CRA Guidance July 2026: The Edge Cases, Worked Through
When does a component reclassify your product? When does a spare part stop being one? The Commission's July 2026 CRA guidance, explained with worked examples.
Vulnerability Management
ENISA on Frontier AI: 5 Consequences for the CRA
ENISA's July 2026 frontier AI paper: exploitation at machine speed. 5 consequences for Cyber Resilience Act manufacturers, from CVD floods to patch diffing.
Compliance
CRA vs AI Act: Cybersecurity Overlap for High-Risk AI
Learn when high-risk AI products can reuse CRA cybersecurity evidence for AI Act security requirements, and which AI-specific duties remain separate.
Country & Market Guides
CRA for German Manufacturers: BSI, CERT-Bund and CE Marking
Country brief for German manufacturers under the Cyber Resilience Act: BSI as combined market surveillance and notifying authority, CERT-Bund, DAkkS.
Compliance
ENISA's Secure Update Mechanisms Advisory: A CRA Guide
A practical guide to ENISA's Secure Update Mechanisms advisory: the CRA update obligations, 7 threats, the controls that counter them, and a worked example.
Stay in the loop
Get notified when we publish new articles about CRA compliance and product security.