The CRA toolbox
Free, practical tools to work through the Regulation: check whether the Act applies, map every requirement, estimate the cost of compliance, and keep your vulnerability handling on track. No sign-up.
Everything in one place
Each tool is free and maps to a stage of the compliance journey, from first scoping to ongoing monitoring.
Confirm whether the Act applies and your likely class.
Open the Fast Check ↗FreeCompliance matrixMap every Annex I & VII obligation and track it to done.
Open the matrix ↗FreeCost calculatorEstimate the one-off and annual cost of compliance.
Open the calculator ↗FreeVulnerability AnalyzerCross-reference your SBOM against the NVD & EUVD, and track End-of-Life components.
Open the Analyzer ↗FreeDoC generatorGenerate an EU Declaration of Conformity (Annex V) for your product.
Open the generator ↗FreeClassification finderPin down whether your product is default, important or critical, by name.
Open the finder ↗FreeSupport-period plannerSet your minimum support period and flag components that reach End-of-Life too soon.
Open the planner ↗Tools are informational and do not replace formal conformity assessment.
A suggested order
There is no single right sequence, but this is a sensible path from "does it apply?" to a signed declaration.
Start here. Confirm whether the Act applies to your product and its likely class.
Open →Pin the class. Match the Annex III and IV categories to confirm default, important or critical.
Open →Size the effort. Get an indicative one-off and annual cost for your class and current readiness.
Open →Build the foundation. Generate and screen your SBOM and stand up vulnerability monitoring.
Open →Set the clock. Work out your support period and flag components that reach End-of-Life too soon.
Open →Work through everything. Track every Annex I and VII obligation to done, and export the checklist.
Open →Finish the loop. Once conformity is met, draw up your EU Declaration of Conformity.
Open →Built a CRA tool? Get it listed.
We want this page to be the most useful set of CRA tools on the web. If your company offers a tool that helps manufacturers, developers, importers or distributors comply with the Cyber Resilience Act (free or paid), submit it for review and possible listing here.