Attesly Reviews & Product Details

Attesly keeps one record per product for the EU Cyber Resilience Act (Regulation (EU) 2024/2847). It suggests the product class and conformity route, imports the SBOM your build already produces (CycloneDX or SPDX JSON from tools such as syft, cdxgen or Trivy) and checks every component with a package URL against the public OSV.dev database – again on every rescan, so newly published advisories show up. A score out of 100 shows what is still missing for the technical documentation, and Article 14 reporting deadlines (24 hours, 72 hours, 14 days or one month) are calculated from your case dates, with a summary for the reporting platform. Records for manufacturers, importers and distributors, each for their own role. Everything can be exported as CSV, JSON, Markdown or PDF. Attesly organises evidence; it does not certify products or give legal advice – your team decides which obligations apply. Available in English, German, French and Italian.