June 2026
Vulnerability Reporting
Manufacturers must report actively exploited vulnerabilities to ENISA within 24 hours.
—
EU Cyber Resilience ActYour CRA Compliance Platform
Your CRA Compliance Platform
From Day One and Beyond
The EU Cyber Resilience Act demands ongoing cybersecurity for every connected product in Europe. Seentrix helps manufacturers achieve compliance, maintain it continuously, and stay audit-ready. Not just for the deadline, but for the long run.
Time until CRA enforcement
00Days
:00Hours
:00Minutes
:00Seconds
The CRA Compliance Challenge
Manufacturers face unprecedented cybersecurity obligations under the EU Cyber Resilience Act.
87%of manufacturers are not yet CRA-ready
Most companies underestimate the scope of requirements for their connected products.
24hvulnerability reporting deadline
Actively exploited vulnerabilities must be reported to ENISA within 24 hours.
€15Mmaximum penalty for non-compliance
Or 2.5% of worldwide annual turnover, whichever is higher.
Everything You Need for CRA Compliance
Four integrated modules that guide you from assessment to certification-ready documentation.
01
Scope Assessment
Determine your product's CRA category, conformity route, and whether a notified body is required. All in minutes.
02
Compliance Checklist
Interactive checklists mapped to CRA Annex I requirements, with progress tracking and evidence linking.
03
SBOM Management
Upload and manage Software Bills of Materials with automated vulnerability scanning against known CVE databases.
04
Document Hub
Generate EU Declaration of Conformity, technical documentation, and vulnerability handling policies from templates.
Seentrix AI
A CRA assistant built entirely on European technologies.
A CRA-specialist assistant built into Seentrix. Ask questions in plain English and get answers grounded in the regulation itself — on infrastructure operated end-to-end by European companies.
01
European by design
Powered by Mistral AI in Paris. Every hop in the pipeline runs on European infrastructure.
02
Grounded in the regulation
Every answer cites the specific article, annex, or Seentrix page it was drawn from.
03
Context-aware
Knows which screen, product, and organisation you're looking at. Replaces "where's that feature again?".
04
Actionable
Deep-links to the right page, drafts incident narratives on request, and explains what's missing before you issue a DoC.
Get Compliant in 3 Steps
From first assessment to audit-ready documentation — Seentrix guides you through the entire CRA compliance journey.
01
Assess Your Products
Run the scope assessment to determine your CRA category, conformity route, and whether a notified body is required.
02
Track Requirements
Work through interactive checklists mapped to CRA Annex I. Upload your SBOM and scan for known vulnerabilities.
03
Generate Documentation
Export your EU Declaration of Conformity, technical documentation, and vulnerability handling policies — ready for auditors.
Built for Product Manufacturers
We built Seentrix so manufacturers of every kind can navigate CRA compliance with confidence, from first assessment to market-ready documentation.
01
Industrial & OT
Map your PLCs, SCADA systems, and industrial controllers against CRA Annex I requirements. Get clarity on conformity routes and notified body obligations for your operational technology.
02
IoT Devices
Manage cybersecurity-by-design obligations for connected consumer and commercial devices. Track vulnerabilities, maintain SBOMs, and generate the documentation auditors expect.
03
Software & Firmware
Assess standalone software products and embedded firmware against CRA scope criteria. Automate vulnerability monitoring and produce EU Declarations of Conformity from templates.
Built by Compliance Engineers
Built in the United Kingdom by a team with deep roots in industrial automation and cybersecurity standards.
Your data never leaves the EU. Database + file storage on Supabase in London (eu-west-2), web application on Vercel in Frankfurt (fra1), error tracking on Sentry in Germany (de.sentry.io).
IEC 62443
ETSI EN 303 645
EU GDPR Compliant
EU data residency
Simple, Transparent Pricing
Start free and upgrade as your compliance needs grow. See the full comparison table on the pricing page.
Free
Explore CRA requirements
€0
- 1 product · 1 user
- Full compliance checklist
- Academy + glossary
Most Popular
Professional
Solo founders, 1–3 products
€59/mo
- 3 products · 3 users
- SBOM + vulnerability scanning
- DoC + end-user info PDFs
- Incident reporting (Art. 14)
Business
Compliance teams, multiple products
€199/mo
- 15 products · 10 users
- Daily continuous monitoring
- Public PSIRT + security.txt
- API access · Priority support
Enterprise
Large orgs, SSO, SLA, CSM
€749/mo
- Unlimited products + users
- SSO / SAML · parent-child orgs
- Dedicated CSM + 99.9% SLA
- Custom MSA + data residency
Compare all 60+ features
Full feature matrix across every tier, including upcoming additions.
CRA Timeline
Three deadlines stand between you and the EU market
The Cyber Resilience Act rolls out in phases. Miss one and your product can't ship to the EU.
September 11, 2026
Full CRA Enforcement
All essential cybersecurity requirements apply. Products must comply before being placed on the EU market.
—
December 2027
Conformity Assessment
Notified body assessments required for "important" and "critical" product categories.
—
Dates pulled from Regulation (EU) 2024/2847. Verify against the official text on EUR-Lex before relying on them in legal filings.
Frequently Asked Questions
Everything you need to know about the CRA and how Seentrix helps.
The CRA is an EU regulation that establishes mandatory cybersecurity requirements for all products with digital elements sold in the European market. It covers hardware and software, from IoT devices to industrial controllers.
If you manufacture or import products with digital elements into the EU market, the CRA likely applies. This includes connected devices, standalone software, and embedded firmware. Run our free scope assessment to find out in minutes.
Vulnerability reporting obligations begin in June 2026. Full enforcement starts September 11, 2026. Notified body conformity assessments for critical products are required by December 2027.
Non-compliance can result in fines up to €15 million or 2.5% of worldwide annual turnover, whichever is higher. Products can also be withdrawn from the EU market.
You can complete your first scope assessment in under 10 minutes. Most teams have a full compliance picture within a few days, depending on the number of products and complexity.
Yes. The free plan includes one product with basic scope assessment and a read-only compliance checklist. No credit card required.
Get Your Free CRA Readiness Checklist
Join our newsletter and receive a practical checklist to assess your CRA readiness, delivered straight to your inbox.
We respect your privacy. Unsubscribe at any time.