Cyber Resilience Act compliance for product makers
A practical workspace to assess, document and maintain your product's CRA compliance.
No newsletter. One email when early access opens.
Product preview
Your CRA compliance progress
Next up
Interface preview. Values illustrative.
Manufacturers need to understand which CRA requirements apply to their products, assess cybersecurity risks, document decisions, manage vulnerabilities and maintain evidence throughout the product lifecycle.
ITHACOS brings that process into one structured workspace.
The core concept
Six stages, one workspace
Determine which CRA obligations apply to your product.
Perform and maintain the cybersecurity risk assessment.
Build the required technical documentation as you work.
Connect requirements to actual evidence.
Track vulnerabilities, security updates and post-market obligations.
Know what is complete, what is missing and what supports your conformity assessment.
Marking a requirement as done proves nothing. ITHACOS keeps the whole trail connected, so the work you did is the work you can show.
CRA tools drift towards enterprise GRC. ITHACOS goes the other way: the structure a small team needs, and nothing it doesn't.
Enough structure to do CRA properly. Without turning your company into a compliance organization.
ITHACOS is currently being built for manufacturers preparing for the Cyber Resilience Act.
Early users will help shape the product.
From requirements to evidence.