Cyber Resilience Act
Manufacturers report actively exploited vulnerabilities within 24 hours. We check your SBOMs, run the Article 14 clocks and draft each report.
Article 14 reporting for products with digital elements
The duty
- Who reports
- Manufacturers of products with digital elements
- Legal basis
- Article 14 of Regulation (EU) 2024/2847, applicable since 11 September 2026
- 24 hEarly warning
- 72 hVulnerability notification
- 14 daysFinal report, after a corrective or mitigating measure is available
The first two run from when you become aware. For severe incidents, the deadlines are 24 hours, 72 hours and one month.
Read the explainer: CRA Article 14What the Reporting Desk does
- SBOM upload in CycloneDX or SPDX JSON, in the web interface or through the API, with upload tokens limited to one product.
- Every hour, each monitored release is checked for actively exploited vulnerabilities listed by CISA KEV and ENISA EUVD, matched with OSV advisory data to its npm, PyPI, Maven, Go and NuGet components.
- Alerts go by e-mail to the contacts you name and to Slack, Microsoft Teams or a signed webhook; if nobody has opened or acknowledged the case two hours after its clock started, your named backup is alerted as well.
- Choose per channel: every alert, only the urgent ones (the first alert, escalations and overdue deadlines), or only when a case opens.
- The Article 14 clocks for actively exploited vulnerabilities and severe incidents, calculated from the time you became aware and shown in UTC.
- Report drafts with the fields and field limits of the single reporting platform, each field ready to copy. You submit to ENISA yourself; the submission time and reference are recorded.
- Append-only audit trail of who knew what, when.
- Download everything: one archive with your account data, every document as it arrived, the findings, the cases with their deadlines and reports, and the complete audit trail.
- Four roles: Owner, Administrator, Member, Viewer.
- The application and customer data are hosted in Germany (Hetzner).
- E-mail support Monday to Friday, 9:00–18:00 CET/CEST, except public holidays.
Plans
Starter €149, Team €449, Business €990 a month, for 3, 10 or 25 products. Yearly billing: 12 months for the price of 10.
For businesses only. All prices plus VAT.