Everything you need to
comply with CRA
Free tools, guides, and resources to help you prepare for the EU Cyber Resilience Act.
Full compliance required by 11 December 2027 - vulnerability reporting obligations apply from September 2026
Tools
Scope assessment and compliance management tools to understand your obligations and track your progress.
Explore tools
Guides
Plain-language explanations of what CRA requires, who it affects, fines, timelines, and how to prepare.
Read guides
Podcasts & videos
Expert conversations on CRA standards, industry readiness, navigating compliance, and what to expect.
Watch & listen
Stories
Real-world stories of organisations preparing for CRA compliance using SAMMY and other practical approaches.
Read stories
FAQ
Answers to the most common questions: what CRA is, who it applies to, when it applies, and why it was introduced.
See FAQManage CRA with SAMMY
SAMMY is the free tool that helps software teams assess, manage, and evidence CRA compliance across their product portfolio. Built on OWASP SAMM by AppSec and legal experts, covering risk assessment, technical requirements, vulnerability management, and documentary obligations.
Try SAMMY for free
Learn from CRA experts
Watch and listen to deep-dive sessions on CRA implementation, security maturity, and practical compliance preparation.
