Regulation (EU) 2024/2847: Article 14 reporting applies since 2026-09-11, the rest from 2027-12-11
The EU Cyber Resilience Act kit for small software and firmware makers.
Find out whether your product is in scope, keep an SBOM per version, run the 24h / 72h / final-report incident clock, and draft your technical documentation and declaration of conformity from your own inputs. Every statement cites the article it comes from.
Check your scope (free) Get the free CLI Join the waitlist
This is a checklist and drafting aid, not legal advice and not a guarantee of compliance with Regulation (EU) 2024/2847. Confirm your obligations with qualified counsel and the market surveillance authority of your Member State. Text of the Regulation: EUR-Lex.
Scope and class
Answer ten questions and get a reasoned verdict with Art. 2, Art. 3 and Annex III/IV citations, plus the obligations and dates that follow. Free, today.
Art. 14 incident clock
Record when you became aware. The clock computes the 24-hour early warning, the 72-hour notification and the final report, and drafts each stage with the fields the Regulation lists. The CLI does this locally today.
SBOM and version diff
Keep a CycloneDX or SPDX SBOM per product version, see what changed between releases, and watch it against OSV.dev with triage states. Only package coordinates leave the deployment.
Technical documentation
An Annex VII-structured file assembled from your product record, SBOM and policies. Missing sections are marked, never invented.
Declaration of conformity
Annex V and the simplified Annex VI layout with your product, standards and signatory, exported as Markdown and PDF.
Evidence archive
Hash-chained, encrypted at rest, retention set to the ten-year rule of Art. 13(13). Export everything as a zip at any time.
The free CLI, available now
One static binary for Linux, macOS and Windows. crakit scope, crakit sbom, crakit vulns, crakit policy and crakit incident. Nothing leaves your machine except OSV.dev queries by package coordinates.
curl -fsSL https://crakit.tewodros.me/install.sh | shPlanned pricing for the web app
The web app is not open yet. These are the prices it will open at.
Free
$0/month
- 1 product
- Manual scans with the free CLI
- 1-year evidence retention
- No CI upload API
Starter
$49/month
- 3 products
- Nightly vulnerability watch against OSV.dev
- 10-year evidence retention
- No CI upload API
Pro
$199/month
- Unlimited products
- Nightly vulnerability watch against OSV.dev
- 10-year evidence retention
- CI upload API