Free tool
CRA Reporting Desk
Since 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe incidents under the EU Cyber Resilience Act. This free desk checks whether you are ready, logs each case, and counts down the 24-hour early warning, 72-hour notification and final report.
No sign-up. Everything you enter stays in this browser unless you ask us to email you a case's deadlines. You still file through ENISA's Single Reporting Platform. How the Article 14 deadlines work · Just need the dates? Deadline calculator
Loading the desk…
Paid plans opening next
CRA Desk plans
The free desk stays browser-only. Paid plans add shared cases, reminders, evidence trail, review exports and portfolio oversight.
Team Desk
EUR 249/month
For one product or incident-response team tracking Article 14 cases together.
Portfolio Desk
From EUR 699/month
For manufacturers watching multiple product families, owners and review paths.
No payment is taken here. We are testing whether these prices match real buying intent before building accounts and checkout.
CRA Article 14 guides
- CRA Article 14 deadline calculator (24h, 72h, final report)
- CRA Article 14 reporting deadlines explained
- CRA Article 14 report template (24h, 72h, final)
- ENISA CRA Single Reporting Platform: register and submit
- CRA SRP fields checklist for each Article 14 report
- CRA Assigned Representative: who submits your reports
- CRA Article 14 evidence log: what to record
- Informing users under Article 14(8)
- Notifying an actively exploited vulnerability
- Notifying a severe incident
- Which CSIRT do you notify?
- The 24-hour early warning
- The 72-hour notification
- The final report