1. [Home](https://www.g2.com/) 2. ... 3. [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools) 4. [CVDPortal Discussions](https://www.g2.com/products/cvdportal/discuss) [ ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_aae3fc07080f1a3b1e870049deffb470/cvdportal.png "Product Avatar Image") ](/products/cvdportal/reviews) [ CVDPortal ](/products/cvdportal/reviews) 0 ratings CVD Portal is a compliance platform for the EU Cyber Resilience Act (CRA, Regulation (EU) 2024/2847). It helps manufacturers of hardware and software products with digital elements meet every CRA obligation from one product record, from classification to Article 14 vulnerability reporting. From 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe incidents to ENISA and the national CSIRT, with a 24 hour early warning, a 72 hour notification and a final report. From 11 December 2027, the full regulation applies, including the Annex I essential requirements, the technical documentation, the EU Declaration of Conformity and CE marking. What CVD Portal does: - Product classification. A free classifier resolves each product to default, important Class I, important Class II or critical under Annex III and Annex IV, and derives the Article 32 conformity route. - Coordinated vulnerability disclosure. A free whitelabel disclosure portal under your own brand, with a hosted RFC 9116 security.txt, PGP support and 48 hour acknowledgment tracking. - Article 14 reporting. Timers for the 24 hour, 72 hour and final report deadlines, and filing packages prepared for the ENISA Single Reporting Platform. The final submission to the authority stays a human action. - Risk assessment. A STRIDE risk assessment per product, with likelihood and impact scoring, mapped to the Annex I requirements it makes applicable. - Annex I and technical documentation. An applicability decision for every Annex I requirement, with evidence or a justification, and the Annex VII technical file, the EU Declaration of Conformity and the simplified declaration generated from the same record. - SBOM and advisories. SBOM import in SPDX 2.3 and CycloneDX 1.6, component vulnerability matching, and CSAF 2.0 advisories with VEX. - Audit trail. A hash-chained audit log and point-in-time snapshots of the technical file for each release. - Cross-framework evidence. Controls mapped to ISO 27001, NIS2, DORA and NIST CSF 2.0, so evidence is collected once. Who uses it: product security, compliance and engineering teams at manufacturers that place connected devices, industrial equipment or software on the EU market, and the consultants who support them. Data residency: customer data, analytics and logs stay in the European Union on every plan. CVD Portal is built by Porta Regulus B.V. in Amsterdam. Pricing: the Free plan costs €0 per month and covers the disclosure portal. Reporting is €99 per month and Compliance is €299 per month. Enterprise pricing is on request. New accounts get a 14 day free trial of the paid features. Show More When users leave CVDPortal reviews, G2 also collects common questions about the day-to-day use of CVDPortal. These questions are then answered by our community of 850k professionals. Submit your question below and join in on the G2 Discussion. * * * ### 0.0 Nps Score ### All CVDPortal Discussions Search Most CommentedMost HelpfulCommon QuestionsNewest All DiscussionsDiscussions with CommentsCommon QuestionsDiscussions without Comments FilterFilter Filter byExpand/Collapse Sort by Most Commented Most Helpful Common Questions Newest Filter by All Discussions Discussions with Comments Common Questions Discussions without Comments Sorry... There are no questions about CVDPortal yet. ## Start a New Software Discussion Have a software question? Get answers from real users and experts [Start A Discussion](/products/cvdportal/discussions/new?entry_point=discussions%23product) * * * ![Product Avatar Image](https://images.g2crowd.com/uploads/product/hd_favicon/8595fa438f5d376bc9ba8f4aa9196ec3/cvdportal.svg "Product Avatar Image") ### Have you used CVDPortal before? Answer a few questions to help the CVDPortal community [ Yes ](javascript:void(0))[ Yes ](https://www.g2.com/login?context=product_review&return_to=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fcvdportal%2Fdiscuss%3Fsmall_ask%3Dcvdportal) No