123% flere rapporterede CVE'er pr. dag i 2026 end sidste år.

CRA-compliance til produktchefer

Vid, hvad der er i hver release, og tag den dokumentation, din CRA-proces har brug for, med til de europæiske markeder

Produktstrategi med compliance først

Hvert build på CRACI producerer en SBOM over det, det faktisk hentede, med en fuldstændighedsstatus, så den dokumentation, din CRA-proces har brug for, bygges op, mens du leverer, ikke i hast før lancering. CRACI automatiserer en væsentlig del af den synlighed i og dokumentation for forsyningskæden, din CRA-proces har brug for; produktbeslutningerne forbliver dine.

An SBOM recorded during the build Packages from npm, PyPI, Cargo, Go, OCI registries and the CI cache pass through a package-aware proxy on the CRACI runner. The job's SBOM lists what was fetched, states its completeness and exports as CycloneDX or SPDX. Package sources npm PyPI Cargo · Go OCI registries CI cache restore Package- aware proxy on the runner Job SBOM express 5.2.1 requests 2.32.3 serde 1.0.219 + transitive deps Declared license on every component Complete Completeness states per job and cache: Complete, Complete with connections, Incomplete, Unavailable, Not recorded CycloneDX · SPDX

Optimering af time-to-market

Opsætningen er en ændring på én linje: Installér GitHub-appen, og sæt runs-on: craci. Kørsler vises stadig i GitHub, så udviklerne beholder deres workflow, mens hvert build registrerer sin SBOM, kører under en egress-politik og registrerer provenance-data. Der er intet ekstra trin at køre før en release.

Connect CRACI with a GitHub App The CRACI GitHub App is installed on all or selected repositories of a GitHub organization. CRACI can then run the jobs of the repositories you chose. Install the CRACI GitHub App Repository access for your organization All repositories Only selected repositories api-service web-app firmware sandbox CRACI runs the jobs of the repositories you chose You keep control of which repositories those are Runs, logs and checks stay in GitHub

Kundetillid og gennemsigtighed

Når en kunde spørger, hvad der er i dit produkt, kan du eksportere SBOM'en i CycloneDX eller SPDX med transitive afhængigheder, deklarerede licenser og de sårbarheder, der er fundet i dens komponenter. API'et returnerer SBOM'er, netværkstraces og provenance.

SBOMs and build records for each reader SBOMs export as CycloneDX or SPDX, including transitive dependencies and the vulnerabilities found in their components, and the API returns SBOMs, network traces and provenance, so the same record serves customers, auditors and your own tooling. One record SBOMs Vulnerability records Provenance Network traces Exported from CRACI or through the API CycloneDX SBOM SPDX SBOM API: network traces API: provenance Same evidence, every audience No manual assembly between the build and the SBOM SBOMs carry transitive dependencies and vulnerabilities

Markedsadgang og ekspansion

At sælge i EU under Cyber Resilience Act betyder, at du skal håndtere sårbarheder i hele supportperioden og rapportere dem, der udnyttes aktivt. CRACI bliver ved med at genvurdere SBOM'erne for det, du har leveret, indsender CRA-underretningerne på dine vegne og leverer teknisk bevismateriale til din dokumentation. Overensstemmelsesvurderingen og CE-mærkningen forbliver din proces.

CRA notifications, submitted for you When a vulnerability is actively exploited, the CRA sets deadlines: an early warning within 24 hours, a notification within 72 hours and a final report 14 days after a fix is available. CRACI submits them through the CRA Single Reporting Platform to the CSIRT and ENISA on the manufacturer's behalf. Actively exploited vulnerability found Aware 24 hours Early warning 72 hours Notification Fix + 14 days Final report CRACI submits on your behalf Through the CRA Single Reporting Platform to the CSIRT and ENISA and shows which products and releases are affected What stays with you The reporting obligation itself Informing affected users Severe incidents: final report within one month

Lever compliant produkter hurtigere

Book en demo for at fremskynde produktudviklingen med CRACI

Book en demo