Compliance
How to Generate a Firmware SBOM: Tools and Workflows
Generate a firmware SBOM using Yocto, Buildroot, EMBA, or Syft. ENISA vulnerability reporting starts September 11, 2026. Step-by-step workflows for CRA compliance.
Cyber Resilience Act Blog
Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
Compliance
Cybersecurity Act 2 (CSA2): what CRA manufacturers should watch
CSA2 is still a proposal. COM(2026) 11 final would reshape cybersecurity certification, ICT supply chains and ENISA powers.
Compliance
Multi-Role CRA: Manufacturer, Importer, Distributor
CRA playbook for companies that manufacture, import and distribute: role mapping, obligation stacking, vulnerability routing, penalties and conflict points.
Vulnerability Management
RFC 9116 security.txt: required fields, location and example
Set up security.txt at /.well-known/security.txt: Contact, Expires, a copyable example and the CRA technical file link.
Compliance
Generate an SBOM for CRA: Tools, Formats, CI/CD
A hands-on guide to generating Software Bills of Materials for CRA compliance. Covers open-source tools, format selection, and automated pipeline integration.
Compliance
CRA Distributor Checklist: 5 Verification Steps for Every Product
An operational CRA distributor companion: receiving checklist, quick-reference card, real scenarios, and the acts that turn a distributor into a manufacturer.
Stay in the loop
Get notified when we publish new articles about CRA compliance and product security.