Individual CRA services you can use on their own
Concrete Cyber Resilience Act services – pick exactly the one you need right now.
Alongside guiding you through the whole compliance journey, we also offer individual services you can book on their own. We are expanding the list step by step; we start with a focused CRA consultation.
CRA consultation
A focused consultation with a Cyber Resilience Act expert. We answer your specific questions, validate your decisions and point you to the next steps.
Learn moreTechnical documentation preparation
We compile your technical documentation per CRA Annex VII – from product description and risk analysis to SBOM, vulnerability handling and the declaration of conformity.
Learn moreVulnerability handling process
We set up a complete vulnerability handling process per the CRA – from logging and assessment through remediation and security updates to coordinated disclosure and reporting.
Learn moreImpact assessment / CRA scoping
An entry-level assessment of the CRA's impact on your portfolio – we identify the affected products, your role, the category and the scope of compliance as the basis for the whole journey.
Learn moreThreat modeling + risk assessment
We carry out threat modeling and a cybersecurity risk assessment of your product – the basis for both security by design and the technical documentation the CRA requires.
Learn moreSecurity by design and SDLC
We introduce security-by-design principles, secure defaults and a secure development lifecycle (SDLC) so your product meets the CRA's essential requirements from the design stage.
Learn moreEU declaration of conformity + CE
We guide you through conformity assessment, prepare the EU declaration of conformity and the basis for CE marking – for self-assessment and products requiring a notified body alike.
Learn moreCRA for importers and distributors
We help importers and distributors verify product compliance, set up control procedures and obtain from suppliers the evidence the CRA requires.
Learn morePenetration testing
Penetration testing and security testing of products with digital elements – independent assurance of resilience and evidence for Cyber Resilience Act compliance.
Learn moreCSIRT as a service
Outsourced cyber incident response capability: a contact point, triage, remediation coordination and incident and vulnerability reporting to ENISA and NÚKIB within deadlines.
Learn moreStart with CRA before the deadline catches up with you
A free consultation will quickly show you where you stand and the shortest path to compliance.
Book a consultation