Skip to main content

Datasets

Every dataset is CC BY 4.0. Reuse it with attribution using the citation shown.

CRA Exposure Study 2026​

Coordinated vulnerability disclosure readiness among EU manufacturers, measured before Article 14 of the EU Cyber Resilience Act applies on 11 September 2026. How many manufacturers of products with digital elements publish a machine-readable security contact and a discoverable disclosure policy.

How to cite​

CVD Portal, "CRA Exposure Study 2026: coordinated vulnerability disclosure readiness among EU manufacturers", 2026-07-29. https://cvdportal.com/research/cra-exposure-2026 (CC BY 4.0)

Best CRA compliance software ranking (2026)​

A reproducible ranking of ten platforms that help a manufacturer, importer, distributor or open-source steward meet Regulation (EU) 2024/2847 (the Cyber Resilience Act). Each platform is scored 0 to 3 on twelve weighted criteria summing to 100. Every cell carries a primary-source URL.

How to cite​

CVD Portal, "Best CRA compliance software ranking (2026): ten platforms across twelve weighted criteria", 2026-09-16. https://cvdportal.com/best/cra-compliance-software (CC BY 4.0)

CRA Annex I requirements catalogue​

The 22 essential cybersecurity requirements of Annex I of Regulation (EU) 2024/2847, with stable identifiers and the FprEN 40000-1-2:2026 clauses that can evidence each one.

How to cite​

CVD Portal, "CRA Annex I requirements catalogue", 2026-09-30. https://cradata.eu/requirements (CC BY 4.0)

CRA vendor register​

What 13 CRA tools document on their own public pages for each of the 22 essential cybersecurity requirements of Annex I of Regulation (EU) 2024/2847, with a quoted source and the date of the check.

How to cite​

CVD Portal, "CRA vendor register", 2026-10-01. https://cradata.eu/register (CC BY 4.0)