Product security, supply chain and CRA readiness
Connected-device manufacturers are asked three connected questions: can you show what is in the product, can you trace a supplier change to the versions it affects, and can you show that this release was validated and authorised? One inventory and one release trail answer all three.
Be ready to show what is in your product, before anyone asks.
Know whether the CRA applies, what your component data can support, and which evidence is still missing.
Know which product versions a supplier change can reach.
Connect supplier components, product versions and software inventories so a supplier update becomes a reviewable impact question.
Make every firmware release traceable, from supplier component to update package.
Validate the build, compare it with the last release, and keep the evidence that a specific device image was authorised to ship.
Different teams, different first question
The same evidence base is used by product security, engineering and compliance, but they start from different symptoms.
Product security lead
Needs to know whether a supplier advisory reaches a shipped version, and to keep the review decision with the product rather than in an inbox.
Firmware engineering
Needs a fast check on the SBOM the build produced, and a precise list of what changed before the release is signed.
CRA / compliance preparation
Needs scope, role and evidence gaps documented before a customer questionnaire or a market launch arrives.
What the badges mean
We would rather mark something as Early Access than describe a roadmap as a product.
Implemented and usable on this site today. Limitations are stated on the tool page.
In design-partner scope with real users. Not generally available, and the website does not simulate it.
Not implemented. Described so you know the direction, never offered as a button that pretends to work.
Start with the free checks
No account, no upload and no sales call before you see a result. If the workflow around the checks is the part you need, Early Access is the conversation.