1 · The CRA readiness check
Answer for your main product as it stands today — Yes, Partial, or No on each. Partial counts: it means the element exists but is incomplete or undocumented.
Your gap report
Run the check above, then export the full gap report — every gap, its duty, its deadline, and its fix.
2 · Free vs the Ready Pack
Free, here, now: the 10-question check, your score and band, the full gap table in deadline order, your top-3 fixes, and the downloadable gap report.
The CRA Ready Pack — the working files that close the gaps — is the onboarding deliverable of the monitoring tier during this test phase:
A fix-pack is your own documentation and working files, assembled from your data — never a certificate, seal, or attestation by us.
3 · Stay ready: Component Watch monitoring, $49/mo
Readiness decays. Components disclose new vulnerabilities every week, and the CRA rule pack itself moves. The monitoring tier:
- Component Watch — public vulnerability disclosures matched weekly against your SBOM component list. No-match weeks send nothing.
- Immediate alerts — a match flagged actively exploited or critical lands at once, with the 24-hour workflow link attached: that match starts your Article 14 legal clock.
- Monthly drift digest — what changed in your components, what changed in the rules, and your current score.
- The CRA Ready Pack included as your onboarding deliverable (SBOM Generator, 24-Hour Workflow Kit, CE Technical Documentation Pack).
$49/mo · or $490/yr annual prepay. No lifetime deal during the test phase.
Test log (this browser)
Completed checks are counted from day one — in-scope completions toward the test gate, out-of-scope completions separately, never merged. In this build the log lives in your browser; at deployment it moves to the operator's test scoreboard.