REGULATION (EU) 2024/2847 (CRA)

CRA readiness,
in plain English.

Fixed-fee technical evidence gap diagnostics for software vendors and dev teams. No vague billable hours.

Official Enforcement Milestones

11 Sept 2026 • Art. 14

Vulnerability Reporting

Mandatory early reporting of actively exploited vulnerabilities to CSIRTs & ENISA.

11 Dec 2027 • Full Force

Full Essential Requirements

Complete Technical Files, SBOMs, CE mark, and security update obligations.

✓ What We Do

• Direct Annex I & II Essential Requirements gap registers.

• SBOM structural integrity and schema verification.

• Coordinated Vulnerability Disclosure (CVD) templates.

✕ What We Do NOT Do

• No penetration testing or code auditing.

• No third-party certification (Conformity Assessment Body).

• No legal representation or signing on your behalf.

Step 1 of 3

1. Software delivery model:

Installed Binary / On-prem / Mobile app / Firmware Pure Remote Cloud SaaS (browser-only, no local agent)

TIER 0

Scope Check

€0

Automated Article 2(1) applicability analysis.

TIER 1 (PILOT)

Evidence Diagnostic

€290 €490

Detailed SBOM & Annex I gap audit with 5-day delivery.

Request Pilot

TIER 2

Document Pack

€1,500+

Pre-drafted Technical File ready for sign-off.