Regulatory readiness. Real progress.
Practical assessments and expert support for manufacturers and product teams. Understand what applies, identify gaps and take the right next steps — for secure and compliant products.
Cyber Resilience Act (CRA)
Readiness assessment report
Sample report · illustrative data
Overall result
Developing
Real foundations exist, but there are material gaps in areas that have to be closed before a conformity claim is defensible. Prioritise the critical items, then the high ones.
Readiness by section
Featured assessments
Free, expert-developed questionnaires based on official requirements. Available in English and German.
Determine your CRA product category
Get an initial indication of whether the Cyber Resilience Act applies to your product and which category may follow.
Cyber Resilience Act
Assess your product's readiness against the CRA requirements and get a prioritised list of next steps.
Secure development lifecycle
Evaluate your secure development process against IEC 62443-4-1 and identify gaps and improvement areas.
A practical path to compliance
A clear process to help you understand requirements and take the right next steps.
More than a checklist. A clearer direction.
Our sign is an open peak in two strokes: the route from requirements to confidence.
Answer structured questions based on official requirements.
Understand what applies to your product, process or organisation.
Address gaps with practical guidance and expert support.
Prepare the documentation the requirements call for.
Get ready for self-declaration or third-party assessment.
Experience in practice
Expert support
Get practical support for complex assessments, gap analysis, remediation and preparation for certification. Benefit from hands-on experience with real-world projects.
What we help with
Insights
After enough years around development teams, I have stopped believing that tools decide whether a secure SDLC works. The teams that got there all had the same thing at the base — the right people, genuinely interested, actually equipped. IEC 62443-4-1 names that base as SM-2 and SM-4, and I think the standard is quietly right about it.