SBOM & vulnerability viewer
Explore a product's components, filter its CVEs, and mark what's actually exploitable with VEX.
Nyitott demo → InteractiveCRA-felkészültség score
Tick off the essential requirements and watch a deterministic readiness score move in real time.
Nyitott demo → InteractiveWhich CRA class are you?
Answer three questions about your product and see whether the CRA treats it as default, important, or kritikus — and what that means.
Nyitott demo → WalkthroughGenerating a CRA dossier
How SBOMs, scans, and decisions compile into audit-ready technical documentation.
Nyitott demo → WalkthroughThe CRA incident-reporting clock
24 hours, 72 hours, 14 nap — the early-warning and notification deadlines when an exploited flaw is found, and what each one needs.
Nyitott demo → WalkthroughSecure-by-default, requirement by requirement
The CRA's essential product requirements — no default passwords, least privilege, secure updates — as a checklist you can actually work.
Nyitott demo → ScenarioScenario: responding to a new CVE in minutes
A kritikus vulnerability drops at 9am. Follow the trail már alert to a customer-ready answer.
Nyitott demo → ScenarioScenario: answering a security questionnaire
The enterprise questionnaire that used to take a week — answered már a living evidence log.
Nyitott demo → ScenarioScenario: when an open-source dependency goes dark
A core library's sole maintainer disappears. Manage the CRA risk of unmaintained components without panic.
Nyitott demo → ScenarioScenario: choosing your conformity route
Self-assessment or a notified body? Walk the decision the CRA forces on you, and what each path costs in time and proof.
Nyitott demo → InteractiveCsomag your CRA support window
Set your product's expected lifetime and see the support period the CRA obliges you to cover.
Nyitott demo → WalkthroughA CRA-grade patch process
Monitor, assess with VEX, remediate, and ship a signed update — with SLAs that scale by severity.
Nyitott demo → WalkthroughStanding up coordinated disclosure
security.txt, intake, triage, and researcher comms — the disclosure process the CRA expects.
Nyitott demo → WalkthroughSBOM generation in CI/CD
Wire CycloneDX generation into the pipeline so every build emits a current SBOM that feeds monitoring.
Nyitott demo → WalkthroughGoverning third-party components
Inventory, license and maintenance health, and a policy gate before a dependency ever ships.
Nyitott demo → ScenarioScenario: ending support the CRA way
A product reaches end-of-life. Notify users, ship the last update, and close out the support period on record.
Nyitott demo → ScenarioScenario: a poisoned dependency
A popular package ships a malicious version. Detect kitettség már the SBOM, contain, and communicate — calmly.
Nyitott demo → ScenarioScenario: a CRA conformity audit
The auditor arrives. Walk them már SBOM to VEX to dossier — every claim traceable to evidence.
Nyitott demo → ScenarioScenario: documenting a risk acceptance
A low-severity flaw won't be fixed before release. Record a defensible, time-boxed acceptance with sign-off.
Nyitott demo → ScenarioScenario: does the CRA apply to your OSS?
Walk the open-source exemptions and the steward-vs-manufacturer line to a clear yes or no.
Nyitott demo →