💡 Don’t you see the light in the darkness of the Cyber Resilience Act?
You’re not alone.

One place. All things CRA.

We’re building a central knowledge hub for everything related to the Cyber Resilience Act — from practical guidance and updates to expert tools and real-world support.
Whether you’re a manufacturer, developer, integrator, or importer, we’re here to help you navigate CRA with clarity and confidence.

Join our mission to build a CRA-ready community — informed, secure, and ahead of the curve.

Who Are We

Kurt Callewaert
Business Line Director Cybersecurity & AI at Capyx

Christophe Devos
CRA Consultant at Capyx

Together, we guide businesses toward meaningful, secure, and future-ready CRA compliance.

Our Vision

CRA compliance should empower, not overwhelm.
We believe the Cyber Resilience Act is more than a regulation — it’s a vital step toward a safer, more trustworthy digital economy.
Our vision is to make CRA principles part of every secure product — from startups to enterprises — and to help shift cybersecurity from a siloed obligation to a shared business mindset.

Our Mission

Make CRA understandable — for everyone.
We simplify the complexity of the Cyber Resilience Act so that product teams, business leaders, and engineers can take clear, confident action.
Through guidance, tools, and community, we help companies not only meet the standard — but lead with it.

🚀 Your Path to CRA Readiness Starts Here

The Cyber Resilience Act may seem complex — but breaking it down into the right steps makes all the difference. We help companies turn uncertainty into action through three clear pillars: Know, Build, and Prove. From understanding your product’s obligations to embedding security and documenting compliance, this is how you secure both the CE mark and your place in the European market.

Know.

Understand your product & obligations

Start with clarity: Identify whether your product falls under CRA scope and how it’s classified. Understand the security requirements, your role in the supply chain, and what CE marking means for your business. Knowledge is the first step toward confident compliance.

Build.

Embed security from the start

Security isn’t an afterthought. Apply secure-by-design principles across your product lifecycle — from development to updates and end-of-life. Set up risk assessments, vulnerability handling, and internal processes that turn compliance into a real competitive advantage.

Prove.

Document, declare & deliver

Compliance is not just what you do — it’s what you can prove. Build your technical file, prepare your EU declaration of conformity, and engage with third-party assessments if needed. This is how you earn the CE mark — and your customer’s trust.

Services

CRA Services for Clients

CRA Gap Analysis

We assess your products and processes against CRA requirements to identify where you’re compliant — and where action is needed.

Secure Development Support

We help embed secure-by-design practices into your development lifecycle — from risk analysis to update mechanisms and documentation.

Technical File & Documentation

We assist in building your technical file, EU declaration of conformity, and other required deliverables for CE marking.

Conformity Assessment Guidance

We prepare you for third-party assessments or self-declaration, ensuring you’re ready for scrutiny — and success.

Staff & Team Training

From engineers to leadership, we train your teams on CRA obligations and how to operationalize them effectively.

Social MCRA Communications & Positioning

We help you clearly communicate your CRA readiness — to customers, partners, and stakeholders — and turn compliance into competitive advantage.

🛠️ Tools Supporting CRA Compliance

Stay ahead of regulations and simplify your journey to Cyber Resilience Act (CRA) compliance.
These hand-picked tools and services help you automate, validate, and secure your software supply chain — faster, smarter, and with confidence.

🧩 SBOM Studio

A centralized platform for creating, validating, and managing SBOMs at scale.
– Auto-ingestion & standardization (CycloneDX, SPDX)
– Metadata enrichment and license insights
-VEX support for vulnerability handling

✔ CRA Ready: Meets transparency, traceability, and risk disclosure requirements.

🔍 SBOM Consumer

A simple yet powerful tool for reviewing and analyzing third-party SBOMs.
– Scan for CVEs, licenses, and outdated packages
– Generate visual dependency graphs
– Command-line or web UI ready

✔ CRA Ready: Quickly assess software integrity and supply chain risks.

🛡️ Aikido Security

Dev-first security platform that fits seamlessly into your workflow.
– Detects CVEs, config flaws, and weak dependencies
– Auto-generates SBOMs and opens PRs to fix issues
– Works with GitHub, GitLab, Bitbucket

✔ CRA Ready: Automates risk detection before deployment.

💼 Our Expertise

Your partner in CRA compliance. We help you move from policy to action.
– CRA readiness audits & gap analysis
– SBOM strategy, tool selection & VEX writing
– Hands-on workshops and implementation support

✔ CRA Ready: We translate regulation into results.