/ Free · no sign-up
Does the Cyber Resilience Act apply to your product?
Ten questions at most, often fewer. Each one checks a specific point of the regulation and tells you which.
Nothing is sent anywhere: it all stays in your browser.
The trap is not the engineering, it is the scope
Nearly every manufacturer I meet knows how to secure a product. What they do not know is which of their references are covered, and whether their server is part of it. Settling the scope takes more time than fixing vulnerabilities.
A certification exempts you from nothing
A calibration accreditation covers measurement accuracy. A metrology approval covers instrument conformity. An aviation certificate covers airworthiness. None of them speaks to the cybersecurity of a digital product, and none replaces the EU declaration of conformity.
11 September 2026 comes before everything else
Article 14 applies more than a year before the body of the regulation. Reporting an actively exploited vulnerability within twenty-four hours takes a channel, a procedure and someone reachable. That is not improvised on the day it happens.
Now you know where you stand
This test gave you a direction. What it cannot do is open your technical documentation and settle it reference by reference. That is exactly the work I do, and the initial scoping costs nothing.