IoT device manufacturers
“If you found an actively exploited vulnerability in your product tomorrow, would you know what to report within 24 hours?”
Manufacturer pathCRAtor by Drivesec – the CRA compliance platform
From datasheet to CRA compliance in one day, not six months.
CRA readiness check in 3 minutes
How it works
Free quiz · personalised report by email
Today
December 2024The CRA enters into force
September 2026Vulnerability and incident reporting, already in force
December 2027Full obligations and CE marking
– days until full CRA obligations apply
The same documents. Six months or one day.
By hand
0 monthsWith CRAtor
0 hours
Indicative times for a single product.
Manufacturer or importer? The CRA asks different things of you.
Importers and distributors
“If your supplier isn’t compliant, it’s your problem. Do you have the right documents, archived for 10 years?”
Importer pathWorking in a test lab or a notified body? CRAtor cuts your workload too. Let’s talk
How it works, in four screens.
See the platform at work.
Everything the CRA requires, in one workspace.
Docs Generation
- Item definition and classification
- Risk assessment
- Standards and frameworks
- Processes description
- Documents hub
Reporting to Authorities
- ENISA-compliant incident notification
- Exploited vulnerability reports
Conformity
- EU Declaration of Conformity
- Support period definition
- V&V generation
Testing
- Conformity test report execution
- Test report review by experts
Secure & Reliable
- Multi-factor authentication
- Backup, DR and SOC
- System load monitoring
Support
- Training
- AI chatbot
What companies that tried it say
Cyber Resilience Act Readiness Check in 3 minutes
You make connected products
See which obligations apply and how far along you are.
You import or resell them
Check what to ask your suppliers and what you must keep on file.
Question 1 of the free assessment
What does your company do with connected products sold in the EU?
- We design or manufacture them
- We buy them from a manufacturer outside the EU and sell them in the EU without changing the logo
- We buy them from EU suppliers and resell them
- More than one of these
Pick an answer to continue. You’ll see your role, scope, likely class and readiness, and get a free report by email.
Frequently asked questions
What is the Cyber Resilience Act and who does it apply to?+
It is the EU regulation on the cybersecurity of products with digital elements. It applies to manufacturers, importers and distributors placing in-scope hardware or software on the EU market.
How do I know whether my product is in scope, and in which class?+
Take our quiz: in about 3 minutes it tells you your role, whether your product is in scope and which class it falls into. Take the quiz
Which documents does CRAtor generate?+
Item definition and classification, risk assessment, standards and frameworks, processes description, support period definition, V&V and the EU Declaration of Conformity, plus ENISA-compliant incident notifications and exploited vulnerability reports.
Really in one day?+
In one day CRAtor takes you from the product datasheet to the documentation the CRA requires. Final compliance also depends on your product and your company’s processes, which is why the Drivesec team supports you through the next steps.
Are AI-generated documents checked?+
Yes. Test reports are reviewed by Drivesec experts, and the Documents hub shows whether each document was generated by the AI, verified by an expert or uploaded by you.
How is my data protected?+
With multi-factor authentication, backups, disaster recovery and a Security Operations Centre, plus continuous monitoring of system load.
Want to see it on your products?
A live demo, built around the documents you need.
Subscribe to our CRA Hotline
One call, all the support you need for Cyber Resilience Act reporting obligations.
