SBOM & vulnerability viewer
Explore a product's components, filter its CVEs, and mark what's actually exploitable with VEX.
Deschis demo → InteractivePregătirea CRA score
Tick off the essential requirements and watch a deterministic readiness score move in real time.
Deschis demo → InteractiveWhich CRA class are you?
Answer three questions about your product and see whether the CRA treats it as default, important, or critic — and what that means.
Deschis demo → WalkthroughGenerating a CRA dossier
How SBOMs, scans, and decisions compile into audit-ready technical documentation.
Deschis demo → WalkthroughThe CRA incident-reporting clock
24 hours, 72 hours, 14 zile — the early-warning and notification deadlines when an exploited flaw is found, and what each one needs.
Deschis demo → WalkthroughSecure-by-default, requirement by requirement
The CRA's essential product requirements — no default passwords, least privilege, secure updates — as a checklist you can actually work.
Deschis demo → ScenarioScenario: responding to a new CVE in minutes
A critic vulnerability drops at 9am. Follow the trail de la alert to a customer-ready answer.
Deschis demo → ScenarioScenario: answering a security questionnaire
The enterprise questionnaire that used to take a week — answered de la a living evidence log.
Deschis demo → ScenarioScenario: when an open-source dependency goes dark
A core library's sole maintainer disappears. Manage the CRA risk of unmaintained components without panic.
Deschis demo → ScenarioScenario: choosing your conformity route
Self-assessment or a notified body? Walk the decision the CRA forces on you, and what each path costs in time and proof.
Deschis demo → InteractivePlan your CRA support window
Set your product's expected lifetime and see the support period the CRA obliges you to cover.
Deschis demo → WalkthroughA CRA-grade patch process
Monitor, assess with VEX, remediate, and ship a signed update — with SLAs that scale by severity.
Deschis demo → WalkthroughStanding up coordinated disclosure
security.txt, intake, triage, and researcher comms — the disclosure process the CRA expects.
Deschis demo → WalkthroughSBOM generation in CI/CD
Wire CycloneDX generation into the pipeline so every build emits a current SBOM that feeds monitoring.
Deschis demo → WalkthroughGoverning third-party components
Inventory, license and maintenance health, and a policy gate before a dependency ever ships.
Deschis demo → ScenarioScenario: ending support the CRA way
A product reaches end-of-life. Notify users, ship the last update, and close out the support period on record.
Deschis demo → ScenarioScenario: a poisoned dependency
A popular package ships a malicious version. Detect expunere de la the SBOM, contain, and communicate — calmly.
Deschis demo → ScenarioScenario: a CRA conformity audit
The auditor arrives. Walk them de la SBOM to VEX to dossier — every claim traceable to evidence.
Deschis demo → ScenarioScenario: documenting a risk acceptance
A low-severity flaw won't be fixed before release. Record a defensible, time-boxed acceptance with sign-off.
Deschis demo → ScenarioScenario: does the CRA apply to your OSS?
Walk the open-source exemptions and the steward-vs-manufacturer line to a clear yes or no.
Deschis demo →