Latest article
How to decide whether a CRA vulnerability needs reporting
Turn the first vulnerability signal into a recorded CRA reporting route, with the affected product, awareness time, owner and deadlines kept together.
Read the articleOutcome-led CRA guides
Finish the CRA work
in front of you.
Decide product scope, route a vulnerability and close a case with retained evidence. Each guide leads to the matching work inside CRA Operations.
Reporting decisionChoose the next outcome
One job at a time.
Product scope
How to determine whether the CRA applies to your product
Define the product, market route and operator role, then preserve a scope decision that can be reviewed when the product changes.
Retained evidence
How to build a CRA vulnerability case file that survives review
Connect the product, chronology, reporting assessment, corrective work and final evidence so the case can be reconstructed later.