CRA Compliance for Software CompaniesPrepare your software for the EU Cyber Resilience Act (CRA) before the September 2026 deadline. ResilienceWP helps SaaS companies, software vendors, open-source maintainers, and plugin developers automate CRA compliance.Features

26-point compliance checklist mapped to specific CRA articles

Document generator: vulnerability disclosure policy, incident response plan, SBOM, EU Declaration of Conformity, risk assessment, security update policy, and security.txt

Vulnerability scanning across npm, PyPI, Go, Rust, Maven, Packagist, NuGet, and WordPress via OSV.dev and WPScan

GitHub integration: auto-import dependencies from your repositories

Incident center with ENISA 24-hour reporting deadline tracking

PDF compliance reports and CycloneDX SBOM export

Webhook integrations for CI/CD pipelines

Live compliance score calculated from open vulnerabilities and incidents

Who needs to comply?The CRA applies to every software product with digital elements placed on the EU market, regardless of where the company is based. SaaS products, libraries, plugins, commercial open source, and desktop applications are all in scope.View plans and pricing | Blog | CRA Resources | Privacy Policy | Terms of Service | Contact