From September 11, 2026, EU software companies must report vulnerabilities and serious incidents within 24-hour, 72-hour and 14-day deadlines. The CRA Quick-Start Kit gives you ready-to-use tools to prepare — without hiring a consultancy.
Instant access · PDF + editable Word/Excel · 7-day guarantee
Also available in French and Portuguese
Determine whether the CRA applies to your product and which risk class it falls into (Annex III/IV).
Step-by-step internal process, with defined owners.
Ready-to-adapt text for all 3 reporting phases (24h / 72h / 14 days).
One-page final check — shows your readiness level.
How to assess third-party components and libraries, including SBOM.
Phased roadmap from today through full application in December 2027.
Available in three single-language editions — English, French or Portuguese — each with all 6 tools in the same language.
Small and medium software or hardware companies with digital elements selling into the EU, without a dedicated compliance team. Written by a security officer with ISO 27001 and regulatory compliance experience for European SMEs.
Also available in French and Portuguese
7-day guarantee — if the kit isn't right for you, full refund, no questions asked.
Leave your email and we'll send you updates on CRA deadlines and the kit launch.