Explore Cyber Resilience Act (CRA)

An interactive guide to the EU Cyber Resilience Act

Eight short steps explain the CRA and what it means for your products. Answer a few questions about your product, try the thirteen security properties one experiment at a time, and handle a vulnerability from the first message to closing the case.

Awareness material, not legal advice.

What is inside

Eight steps, about 40 minutes in all

Part 1: Understand the CRA

  1. 01
    Meet the CRA

    What the CRA is, and what it changes for buyers and makers.

    3 min
  2. 02
    Who it covers

    Which products and companies are covered, and what is excluded.

    4 min
  3. 03
    Dates and categories

    What applies when, and how much proof each product category needs.

    4 min
  4. 04
    Your product

    Answer a few questions to get a provisional category for your product.

    5 min

Part 2: Learn by doing

  1. 05
    Develop securely

    How a risk assessment leads to requirements, tests and evidence.

    5 min
  2. 06
    Build protection

    The thirteen security properties, each with a small experiment.

    8 min
  3. 07
    Maintain securely

    Handle a vulnerability after release, including reporting deadlines.

    8 min
  4. 08
    Test your understanding

    Optional questions to check what you learned.

    5 min

Talk to RelyBlue

Want to talk through the CRA for your product?

An honest conversation about your product and your market. No sales pressure, no fear tactics.

  • You talk to a senior advisor, never a salesperson