Articles 2–3
Scope & Role Checker
Check product scope, EU market relevance, exclusions and your likely economic role.
Free · No sign-upOpen tool
A practical guide through Regulation (EU) 2024/2847
Cyber Resilience Act Tools
Free tools to check CRA scope, product classification, conformity routes and reporting deadlines.
Free to useEvidence-linked resultsNo account needed
Recommended first step
CRA Scope & Role Checker
Start with your product. Work through its connections, commercial context and EU availability to understand whether CRA likely applies — and where you fit in the supply chain.
Guided questionsStep-by-step reasoningProcessed locally
Check your product From product facts to a clear next step
01Product & data connections
02EU market & commercial activity
03Exclusions & economic role
Your result, reasoning and official sources
The tool collection
Eight tools. A practical way forward.
Choose a starting point. Each tool explains its reasoning and links you to the relevant official sources.
Articles 7–8
Product Classification Finder
Compare core functionality with all important and critical technical product categories.
Free · No sign-upOpen tool
Article 32
Conformity Assessment Route Finder
Find available assessment routes and the conditions for internal control or third-party involvement.
Free · No sign-upOpen tool
Article 14
Reporting Deadline Calculator
Calculate awareness-based reporting deadlines with explicit time zones and final-report triggers.
Free · No sign-upOpen tool
Articles 3(30), 21–22, 69
Substantial Modification Checker
Assess product changes, reassessment and responsibility across the 2027 transition.
Free · No sign-upOpen tool
Article 3(2)
SaaS & Remote Data Processing Checker
Separate independent services from remote processing that supports a product function.
Free · No sign-upOpen tool
Articles 3(14), 24
Open Source CRA Checker
Explore commercial supply, contributors, manufacturers and open-source software stewards.
Free · No sign-upOpen tool
Articles 19–21
Importer & Distributor Checker
Identify supply-chain duties, verification steps and responses to suspected nonconformity.
Free · No sign-upOpen tool
A connected assessment
From product to evidence
A useful sequence for planning your CRA work. Revisit earlier decisions when the product changes.
01
Product
Define what you supply.
02
Scope
Check whether CRA applies.
03
Role
Identify your responsibilities.
04
Classification
Match core functionality.
05
Conformity
Find the assessment route.
06
Obligations
Plan security and reporting.
07
Evidence
Document your decisions.
Start with what you build
CRA by product type
Implementation timeline
The dates that matter
Entry into force
The Regulation enters into force. Its obligations have staged application dates.
Assessment bodies
Chapter IV starts applying: notification of conformity assessment bodies.
Reporting obligations
Article 14 reporting for actively exploited vulnerabilities and severe incidents.
General application
Most product requirements apply, subject to the transitional provisions.
Source: CRA Articles 69 and 71. Product transitions and reporting have different rules.
Understand the regulation
Less guesswork.
A clearer path through CRA.
The Cyber Resilience Act brings product cybersecurity into the full lifecycle of hardware and software supplied on the EU market. The right starting point is a clear product boundary and an understanding of your responsibilities.
These tools turn that first assessment into a structured set of questions. You get a qualified conclusion, the reasons behind it, points that need further review and a practical next step.
Read the practical CRA guideFrequently asked questions
Does CRA apply to every software product?
No. You need to check the product boundary, relevant data connection, EU market supply, commercial context and exclusions. Specific rules also apply to FOSS and remote processing.
Are these tools free, and are my answers stored?
All eight tools are free. Answers and dates are processed in your browser, are not stored by the tools and are not sent to a decision API.
Can these tools certify my product?
No. They provide informational guidance based on your answers. They do not perform a conformity assessment, issue certification or establish legal compliance.
Is this an official EU website?
Independent tool. Not affiliated with the European Commission or other EU institutions.