Does the Cyber Resilience Act apply to your device, and what is it missing?
Answer nine questions in under three minutes to find out what the CRA means for your product. You do not need to register, and nothing is stored.
The reporting obligations have applied since 11 September 2026. The requirements for products and vulnerability handling apply from 11 December 2027.
Cyber Resilience Act
Regulation (EU) 2024/2847
9 questions
Scope | Question 1 of 9
Do you supply the device to the EU or the EEA?
What counts is where you sell or ship the device, not where it was developed.
Let's talk about your device.
Tell us about your product and your schedule. We will tell you how we would approach the project and whether we see any major risks. The assessment, up to an indicative price, is free of charge.


