SBOM (Software Bill of Materials)

A machine-readable inventory of every component in a product — the ingredient list regulators and customers now expect. See it →

VEX (Vulnerability Exploitability eXchange)

A statement of whether a known vulnerability actually affects your product, so effort goes to what's genuinely exploitable. See it →

CVE

A public identifier for a specific, disclosed software vulnerability.

CVSS

The 0–10 severity score assigned to a vulnerability.

CRA (Cyber Resilience Act)

The EU regulation setting cybersecurity requirements for products with digital elements. See it →

Conformity assessment

How you prove a product meets the CRA — self-assessment, or review by a notified body. See it →

Support period

How long a manufacturer must handle vulnerabilities — at least five years under the CRA, or the product's expected lifetime. See it →