1. [Home](https://www.g2.com/)
2. ...
3. [Security Compliance Software](https://www.g2.com/categories/security-compliance)
4. [CRA Evidence Discussions](https://www.g2.com/products/cra-evidence/discuss)

[
 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_5f6e4c713bb1df19a94ff8e2349d77d2/cra-evidence.png "Product Avatar Image")
](/products/cra-evidence/reviews)

[

CRA Evidence

](/products/cra-evidence/reviews)

0 ratings

CRA Evidence is the EU Cyber Resilience Act compliance platform for manufacturers, importers, and distributors. The CRA enters full application in December 2027. Products with digital elements placed on the EU market will require a technical file under Annex VII, an EU Declaration of Conformity, ten years of documentation under Article 13, and incident reporting to ENISA under Article 14. Non-compliance carries fines of up to €15M or 2.5% of global turnover. 🔹 SBOM Management. Ingest CycloneDX 1.4+ and SPDX 2.3+, scored against BSI TR-03183, with HBOM support for embedded systems. 🔹 Vulnerability Knowledge Base. Own VKB synced every 15 minutes from NVD, OSV.dev, GitHub Advisories, and CISA KEV, with an independent scanner as a second detection layer. 🔹 Exploit-Driven Prioritization. Findings enriched with EPSS from FIRST.org and CISA KEV, so remediation follows real-world exploitation likelihood, not raw CVSS. 🔹 VEX Automation. VEX statements generated per finding, so non-exploitable CVEs are documented and shared with downstream consumers in machine-readable form. 🔹 Technical File Generation. Annex VII packages, EU Declaration of Conformity, Annex II Security Data Sheets, and CE marking records produced as signed PDFs. 🔹 ENISA Reporting Workflow. Structured 24h/72h/14d notification timelines with deadline tracking and submission receipts. 🔹 Supplier & Importer Portal. Collect SBOMs and conformity declarations from upstream suppliers, so importers and distributors verify compliance before placing products on the EU market. 🔹 CI/CD Integration. CLI publishes SBOMs and release metadata directly from your build pipeline. 🔹 Digital Product Passports. QR-linked passports for physical product labelling. Trusted by manufacturers, importers, and distributors to meet CRA obligations and stay aligned with NIS2, RED, and the Machinery Regulation.

Show More

When users leave CRA Evidence reviews, G2 also collects common questions about the day-to-day use of CRA Evidence. These questions are then answered by our community of 850k professionals. Submit your question below and join in on the G2 Discussion.

* * *

### 0.0

Nps Score

### All CRA Evidence Discussions

Search

Most CommentedMost HelpfulCommon QuestionsNewest

All DiscussionsDiscussions with CommentsCommon QuestionsDiscussions without Comments

FilterFilter

Filter byExpand/Collapse 

Sort by

Most Commented

Most Helpful

Common Questions

Newest

Filter by

All Discussions

Discussions with Comments

Common Questions

Discussions without Comments

Sorry...

There are no questions about CRA Evidence yet.

## Start a New Software Discussion

Have a software question?

Get answers from real users and experts

[Start A Discussion](/products/cra-evidence/discussions/new?entry_point=discussions%23product)

* * *

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/hd_favicon/d72190893b5e317b2665e2c7b2ed4b6c/cra-evidence.png "Product Avatar Image")

### Have you used CRA Evidence before?

Answer a few questions to help the CRA Evidence community

[
Yes
](javascript:void(0))[
Yes
](https://www.g2.com/login?context=product_review&return_to=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fcra-evidence%2Fdiscuss%3Fsmall_ask%3Dcra-evidence)
No