CRA / Operational catalogue

Compliance Tools

A growing suite of interactive tools to help manufacturers, importers, and distributors understand and meet their obligations under the EU Cyber Resilience Act.

00 / END-TO-END

End-to-End Compliance

Walk a single product through the full CRA compliance lifecycle in one guided workflow, from applicability to CE marking and post-market obligations.

01 / SCOPE

Scope & Classification

Determine whether the CRA applies to your product and which Annex III/IV category — and conformity assessment route — it falls into.

02 / ART. 14

Art. 14 — Vulnerability & Incident Reporting

Meet the three-step ENISA reporting chain for actively exploited vulnerabilities in your products.

03 / ART. 13

Art. 13 — Manufacturer Obligations

Document, assess, and demonstrate compliance with ongoing manufacturer obligations throughout the product lifecycle.

Live

Product Security Risk Assessment

STRIDE threat modelling in 4 steps — rate severity and likelihood for each threat category and get a risk score adjusted for your CRA classification.

Open tool
Live

Annex I Requirements Readiness

Self-assess all 19 Annex I essential cybersecurity requirements. Rate your implementation status and get a compliance readiness score with a prioritised gap report.

Open tool
Soon

Manufacturer Obligations Checklist

Interactive self-assessment covering all Art. 13 ongoing obligations — from secure development to post-market monitoring.

Soon

Technical Documentation Builder

Generate a structured template for CRA-compliant technical documentation per Art. 13(13) and Annex VII.

Soon

SBOM Template Generator

Create a Software Bill of Materials template aligned with CRA Art. 13(1) and IEC 62443 requirements.

04 / CONFORMITY

Conformity Assessment

Identify the correct conformity assessment route for your product class and prepare supporting documentation.

Soon

Conformity Assessment Pathway Selector

Answer a few questions about your product to determine whether self-assessment, audit, or full third-party certification applies.

More tools are in active development. Sign up for updates or check back regularly.

Need further guidance or have a question? Contact form