Free tools
Free tools for the Cyber Resilience Act
What the CRA asks you to publish and keep, made in a few minutes. Everything runs in your browser: no account, nothing sent to us.
security.txt generator and checker
Write the RFC 9116 file that tells researchers where to report a vulnerability, or check the one you have.CVSS 3.1 calculator
Score a vulnerability from its eight base metrics, or paste a vector to read it.CVSS 4.0 calculator
The newer version of CVSS, scored with FIRST’s reference calculation: base metrics, or any vector pasted.EPSS score lookup
How likely a vulnerability is to be exploited in the next 30 days: today’s score from FIRST, for up to 30 CVEs at once.Vulnerability disclosure policy generator
A coordinated vulnerability disclosure policy for your products, ready to publish, in English, French or German.SBOM generator
Turn your lock files into a CycloneDX or SPDX SBOM: npm, pnpm, Yarn, Python, Go, Rust, Java, .NET, PHP and Ruby.SBOM viewer and checker
Open a CycloneDX or SPDX file: its components, and what the CRA expects that is missing.
Does the CRA apply to your product?
The first question of all: eight questions give you your class, your obligations and the dates.