CRA Operations
Security Engineering Compliance

EU Cyber Resilience Act workspace

Product security,
case by case.

Manage Cyber Resilience Act scope, reporting decisions, remediation tasks and retained evidence in one connected workflow.

See the workspace
CRA Operations
Search product or case
DS
Friday 7 AugustGood morning, Dlovan
Tracked products12Needs action3Evidence items84
Vulnerability caseFrom intake to a recorded reporting decision.In progress
1 · IntakeFacts recorded
2 · AssessReview in progress
3 · DecideNot recorded
4 · CloseAwaiting evidence
Priority tasksView all 9

Confirm affected firmware versionsField Sensor 4 · CRA-10489 Aug

Record reporting decisionGateway Controller · CRA-103911 Aug

Reporting decision is dueCRA-1039 · 24 hours left

The whole case.
One workspace.

See what needs attention, keep the reporting decision connected to the facts and retain the evidence behind the work.

Product overview
31924
Deadlines

No reporting deadline needs to live in someone’s head

CASE REVIEW
ScopeRiskReport
Assessment

The team sees missing facts before a decision is recorded

DS

Evidence package is complete12 items retained

Evidence

Every case keeps the work behind its outcome

Explore the workspace

One connected system for CRA operations.

Every view feels familiar because products, cases, tasks and evidence use the same underlying information.

About the workspace

From vulnerability to retained evidence.

Four steps keep responsibility visible: record the facts, assess the case, decide the route and close with evidence.

Follow a case

The system behind every product-security case

An operational workspace built around the work your team has to finish.

Deadlines
CRA-1048

Gateway Controller

Critical vulnerability review

Scope confirmed
CRA
Operations
Permissions
  • DSAdministrator
  • SESecurity lead
  • ENEngineer
History
Decision recordedToday, 08:42Assessment approved7 AugustEvidence retained31 July
Product scope
SoftwareConnected deviceComponentRemote service

Built for teams that share responsibility

Same case.
Same picture.

Security, engineering and compliance can continue the work without copying facts between inboxes, documents and spreadsheets.

DSDlovanCompliance
SESarahSecurity
ENEmilEngineering
ReviewingComplete
Open the workspace See common questions

WORKSPACE PRICING

One workspace.
Pay for recorded work.

Every plan includes the same product, case, task and evidence features. Choose the assessment allowance and team size that fit the workspace.

STARTER

€49 / month

100 recorded assessments
  • Unlimited products
  • Up to 5 workspace members
  • Exports and evidence history
Start workspace
Most practical for teams

TEAM

€149 / month

500 recorded assessments
  • Unlimited products
  • Up to 20 workspace members
  • Exports and evidence history
Start workspace

COMPANY

€399 / month

2,000 recorded assessments
  • Unlimited products
  • Up to 50 workspace members
  • Exports and evidence history
Talk to us

New workspaces can explore the product with 30 recorded assessments and up to 2 workspace members before choosing a plan.

The essentials before you begin

Does CRA Operations replace our issue tracker?

It works alongside the systems your engineering team already uses. CRA Operations keeps product scope, reporting decisions, remediation work and retained evidence connected in one workspace.

Can we manage more than one product?

Yes. Each product keeps its own versions, role, market scope and cases, while the team can prioritise open work across the workspace.

Who is CRA Operations for?

It is designed for manufacturers and software teams preparing for the EU Cyber Resilience Act, especially teams that need security, engineering and compliance to work from the same facts.

Do we need to migrate everything at once?

No. Start with one product and one active vulnerability or reporting decision. Add the rest when the workflow is useful to the team.

Does the app make legal decisions for us?

No. Your team remains responsible for the interpretation and decision. The workspace makes the facts, ownership, deadlines and evidence easier to follow.

Can we keep evidence for later review?

Yes. Evidence stays connected to the product, case and decision it supports, so the reasoning can be reconstructed later.

“
Every product-security decision should be traceable without asking who last opened the spreadsheet.

CRA Operations