EmbedHarbor Early Access
EmbedHarbor is being opened gradually. The free tools are live and need no account. The product workflow around them — product versions, supplier traceability and evidence — is in Early Access with a small number of manufacturers. There is no public price list, because nothing paid is generally available yet.
The button opens your mail client with a short template. Nothing is submitted from this page — there is no backend form, and we do not pretend there is one.
What is live, what is Early Access, what is planned
The point of the programme is to be explicit about the difference between what runs today and what is being designed.
Free browser tools
Available nowSBOM Validator, SBOM Diff, CRA Scope Checker and X.509 Decoder. No account, no upload, limits stated on each page.
Product and version records
Early AccessDesign-partner scope in the application workspace. The public website does not provide an account area and does not simulate this.
Supplier traceability and evidence packs
Early AccessBeing shaped with a small number of manufacturers. Evidence outputs are drafts, not a conformity assessment.
Release authorisation and signing workflow
PlannedNot implemented. Described as direction only; no date is promised.
Where the workflow is going
Three connected areas, each with the same rule: what is not live is labelled.
Be ready to show what is in your product, before anyone asks.
Know whether the CRA applies, what your component data can support, and which evidence is still missing.
Know which product versions a supplier change can reach.
Connect supplier components, product versions and software inventories so a supplier update becomes a reviewable impact question.
Make every firmware release traceable, from supplier component to update package.
Validate the build, compare it with the last release, and keep the evidence that a specific device image was authorised to ship.
What we ask of a design partner
- A real product with firmware you maintain and an SBOM you can produce.
- A named contact who can join a short call every few weeks.
- Permission to use your feedback, with anything sensitive kept under NDA.
- No payment during the programme.
Who it is for
IoT OEMs, embedded device manufacturers, firmware engineering teams, product security teams and teams preparing for the EU Cyber Resilience Act. It is a fit when you have a product, an inventory you can produce and a real evidence problem — not when you only need a one-off file check.
One email. A person reads it.
No application database, no waitlist counter, no automated sequence. Write to the public address and we will reply.
[email protected]
Tell us the product, how you produce the SBOM today, and what you need first. If Early Access is not a fit, we will say so and point you at the free checks instead.