Free tool
CRA Reporting Desk
Since 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe incidents under the EU Cyber Resilience Act. This free desk checks whether you are ready, logs each case, and counts down the 24-hour early warning, 72-hour notification and final report.
No sign-up. Everything you enter stays in this browser unless you ask us to email you a case's deadlines. You still file through ENISA's Single Reporting Platform. How the Article 14 deadlines work · Just need the dates? Deadline calculator
Loading the desk…
Need this for a whole team?
The team version adds a shared case log, reminders before each deadline, an evidence trail, exportable report packs and a view across your product portfolio. Tell us what you need and we will set you up.
CRA Article 14 guides
- CRA Article 14 deadline calculator (24h, 72h, final report)
- CRA Article 14 reporting deadlines explained
- CRA Article 14 report template (24h, 72h, final)
- ENISA CRA Single Reporting Platform: register and submit
- Notifying an actively exploited vulnerability
- Notifying a severe incident
- Which CSIRT do you notify?
- The 24-hour early warning
- The 72-hour notification
- The final report