SecuryxAI
Sign inStart free trial
Readiness Assessment

EU CRA Readiness Assessment

18 questions drawn directly from the Cyber Resilience Act's own product-security lifecycle requirements — classification, secure-by-design, vulnerability handling, and reporting — with a domain-by-domain readiness score.

Free18 questions~6 min8 domainsNo credit card
Results are personalized to your answers — nothing is pre-written.
WHAT YOU RECEIVE
  • An indicative readiness scoreWeighted against EU CRA's own published requirements.
  • A score for each of your domainsAll 8 domains, scored separately — not one blended number.
  • Your specific gaps, explainedWhy each one matters and the action that closes it.
  • A Now / Next / Later roadmapPrioritized by severity, so you know what to do first.
  • A downloadable PDF reportSomething you can circulate internally.
The assessment and your score are free. The full report is unlocked with a business email.

What this assessment covers

18 questions across 8 domains, every one tied to a specific published EU CRA requirement.

01Classification & ConformityCRA product tier and the applicable conformity-assessment route (Article 32, Annexes III-IV).
02Secure by Design & DefaultThe essential cybersecurity requirements a product must meet before it can be placed on the market (Annex I, Part I).
03Vulnerability Handling & SBOMIdentifying and tracking vulnerabilities and components across the product's lifecycle (Annex I, Part II).
04Coordinated Disclosure & Security UpdatesDisclosing remediated vulnerabilities and delivering security updates free of charge (Annex I, Part II).
05Incident & Vulnerability ReportingThe Article 14 reporting clock for actively exploited vulnerabilities and severe incidents.
06Technical Documentation & CE MarkingThe technical file and conformity marking a manufacturer must maintain (Article 31, Annex VII).
07Support Period & End-of-LifeThe manufacturer's committed support period and what happens when it ends (Article 13(8)-(9)).
08User Information & Post-Market MonitoringInformation provided to users and ongoing monitoring after the product ships (Annex II, Article 13).

How it works

1Answer 18 questionsAbout 6 minutes. Each question states the requirement it maps to, so you always know what's being asked and why.
2See your score immediatelyYour overall readiness, maturity level, and where your strongest and weakest areas sit — free, on screen, no email required.
3Unlock the full reportAdd a business email to get every domain scored, all findings explained, a prioritized roadmap, and a PDF you can circulate.

This is a self-assessment tool, not a conformity assessment, CE-marking determination, or legal opinion. It produces an indicative readiness score based on your own answers, not an independent verification against the Cyber Resilience Act. Confirm your specific classification, conformity route, and obligations with qualified counsel or a notified body.

WANT THE FULL PICTURE FIRST?

The Executive Guide to the EU Cyber Resilience Act

What the CRA actually requires, who it applies to, and the concrete deadlines security, compliance, and product leaders need on their calendar.

Read Executive Guide

Explore CRA

Hub overview →