Who's Ready for the EU Cyber Resilience Act (CRA)?UpGuard

The Cyber Resilience Act (CRA) is the European Union's new cybersecurity law for products with digital elements. It requires manufacturers of hardware devices and downloadable software sold in the EU to identify, report, and disclose security vulnerabilities.

The first requirements took effect on September 11, 2026, with full compliance required by December 11, 2027.

But how ready is the industry for the CRA? UpGuard's Director of Research and Insights, Greg Pollock, breaks down what the Cyber Resilience Act requires, who has to comply, and what our research found after analyzing thousands of smartphones, tablets, and software products sold across Europe.

Want to learn more? Check out the full research at upguard.com/blog

===============
ABOUT UPGUARD:
===============
UpGuard is a cybersecurity platform that helps global organizations prevent data breaches, monitor third-party vendors, and improve their security posture. Using proprietary security ratings, world-class data leak detection capabilities, and powerful remediation workflows, we proactively identify security exposures for companies of all sizes.

Discover more at upguard.com