cetome CRAted

Evaluate CRA Compliance in Under 1 Hour

Map your hardware and software portfolio to EU Cyber Resilience Act requirements and receive clear, actionable guidance. Reuse the test reports and documentation you already have. No cyber security background or SBOM required.

Almost every feature for 14 days, no card

Create your account with your work e-mail and use every feature on four products for 14 days, except external reviewers, the Excel export and the add-ons (extra slots, colleague seats). Afterwards, a free tier keeps one product.

Immediate Product Assessment

Upload the product documentation you already have, such as existing EN 18031 test reports, user manuals or risk assessments. The AI drafts the evidence from it, with the source of every statement, so you do not rewrite what exists.

Direct CRA Compliance

AI-supported evaluation built on the CRA Annex I Essential Cybersecurity Requirements, with human validation at every step.

100% DIY
No security expertise needed
< 60 Min
First compliance assessment
Zero Code
No SBOM, no source code required
cetome AI
Built on cetome's CRA knowledge
cetome Trained AI

Turn 100+ pages of regulation into actionable steps

Our AI works from cetome's CRA method, not a generic chatbot's opinion: the Essential Requirements, their interpretation and the way we assess them. It scopes your product the moment you describe it, drafts the evidence from the documents you upload, audits your answers, consolidates gaps and drafts your roadmap. A person validates every step: nothing is taken without your say.

Built on cetome's knowledge

Automatic scoping (category and conformity route from your description), audits and roadmaps follow cetome's CRA method, not a generic chatbot's opinion.

Strict Guardrails

Deterministic, structured outputs checked against the CRA text: no invented requirements, no hallucinated standards. Drafts written from your documents cite the document and the page they come from.

Human Validation, Always

AI output never overwrites your own answers. Every AI-generated or AI-enhanced item is labelled, you review it and accept or reject it, and accepting a draft can be undone.

Your Data Stays Yours

Your evidence and your documents are never used to train models. Documents open only for the people working on the product. The AI runs only when you ask, and every run is visible in the product.

Complete End-to-End Workflow

Everything needed to manage compliance

From the first evaluation to reviewed evidence and a remediation roadmap.

Structured Assessment Interface

Answer the Annex I requirements through simple verification questions, with evidence, documents and scores in one place. Upload your product documentation and start from a draft instead of a blank page.

Real-Time Portfolio Monitoring

Track compliance and gaps across your whole portfolio in one dashboard. Compare products, or whole groups of products, side by side, and link the products that share their answers.

Automated Remediation Plans

Consolidate the gaps of a product, a group of products or your entire portfolio, identify the remediation that closes several at once, and turn it into a roadmap your engineering teams can follow.

Human Review and Verdicts

Reviewers read the evidence of each answer and give a verdict, Pass, N/A, Fail or Inconclusive, with a comment. They never see the gaps, the recommendations or the AI's output.

Live demo · try it here

Scoping, profiles, comparison, roadmaps, reviews and organisations

The workflow covers the whole life of an assessment: find out where the product stands in the CRA, decide what applies, compare products, plan the remediation, get the evidence reviewed and work as an organisation.

Live demo · automatic scoping

Product description

A Wi-Fi smart plug with an app, LED status and Matter support. Firmware updates over the air.

CRA scopingDefaultHigh confidence
Scoped 22 September 2026 at 15:34
Scoping result AI Generated

Standard Product with Digital Elements (General PwDE)

The product is a consumer-grade smart plug designed for home automation. While it utilises the Matter protocol for connectivity, it does not perform core security functions like smart locks, alarm systems or biometric access, nor is it a critical infrastructure component or an industrial controller. As a finished hardware device with digital elements that does not fall under the specific Annex III or IV categories, it is a default product: the manufacturer carries out the conformity assessment internally against the Essential Cybersecurity Requirements of Annex I.

Interpreted as: A connected smart plug featuring LED indicators and Matter protocol support for remote control and smart home integration.

Conformity route
Module A (Internal Production Control)Notified body required: NoAlternative: Module B+C or Module H (voluntary third-party assessment)
Harmonised standards (informative)
EN 40000-1-4Regulation (EU) 2024/2847, Article 2(1)
Assessed with CRAscoping.com

In the app, scoping runs on your own description the moment the product is created, and again whenever you change it.

Real CRAted components on sample data, kept in this browser only. Start your 14-day trial to do this on your own products.

Every tier

Know where your product stands in the CRA, in seconds

Describe your product in a few sentences. The moment it is created, the AI scopes it against the CRA: is it in scope, which category applies (default, important class I or II, critical), which conformity route follows, which harmonised standards apply, and why. Change the description and the scoping refreshes. Disagree and override it, and your decision is kept next to the AI result.

  • Runs on creation and whenever the description changes, never in the background
  • Category, conformity route and reasoning, labelled as AI
  • Identifies the applicable harmonised standards, with the article or annex item behind them
  • Your override wins and stays visible
  • Assessed with the CRAscoping.com method

Choose your plan

Every new account with a work e-mail address starts with 14 days of every feature on four products (except external reviewers, the Excel export and the add-ons: extra slots, colleague seats), no card needed. Afterwards the Free tier keeps one product, and a plan keeps everything you built editable.

Billing:
Save up to 20%

Pro

600 €/ month excl. VAT
billed monthly, cancel any time

One manufacturer, up to four products.

  • 4 products
  • Full CRA assessment, with drafts from your documents and AI audit
  • Compare products, consolidated gaps, profiles and roadmaps
  • Review workflow with verdicts and history
Top Choice

Elite

1000 €/ month excl. VAT
billed monthly, cancel any time

Larger portfolios, product families and consultants assessing for clients. Invite an external auditor to review your products.

  • Everything in Pro, for 10 products
  • Product cloning, linked products and workspaces
  • Excel export of reports and comparisons
  • External reviewers on your products
  • Additional product slots and colleague seats on demand

Enterprise

Customlicensed per user and per product

Your organisation under one licence, with roles.

  • Everything in Elite, licensed per user and per product
  • Organisation: seats, roles and time-boxed delegation
  • Bring your own AI key or model
  • Self-hosted deployment, per licence
  • Dedicated support
Book a call

All prices exclude VAT. EU businesses with a valid VAT number are invoiced with reverse charge. Otherwise VAT is added at checkout according to your country.

Which plan is right for me? Your own products, up to four: Pro. Assessing for clients, product families, or an auditor to invite: Elite. Colleagues working on the same products: Elite with colleague seats. Self-hosting or a negotiated licence: Enterprise.

Your data stays yours. Hosted in Europe (Ionos), never sold, deleted with your account on request. Your documents open only for the people working on the product. Excel export on Elite and Enterprise.

Not sure yet? Try it first

Almost every feature on up to four of your own products for 14 days, with your work e-mail. No card, nothing to cancel: afterwards the Free tier keeps one product.

Start your trial

Talk to us

A 20-minute call with our CRA specialists: a guided pilot, an Enterprise licence for your organisation, or a first look at your product together.

Book a call
Questions & Answers

You have a question?
We have the answer.

Can't find what you are looking for? Our team will help you.

Still unsure about the CRA requirements?

Contact us

Pre-requisites

CRAted evaluates the gaps and the associated recommendations from your answers and evidence. You can upload the product documentation you already have, such as test reports, user manuals or risk assessments, and the AI drafts the evidence from it instead of you rewriting it. You get a clear list of what is missing to meet the CRA requirements, while your source code and intellectual property stay with you.

Not at all. The step-by-step questionnaire is designed for product leads, founders and engineers. You do not need to read hundreds of pages of legal text: the platform guides you through plain-English questions and builds the report for you.

cetome Trained AI

It scopes your product against the CRA categories from its description, drafts the product description and the evidence from the documents you upload, with the document and page behind each statement, audits each answer against the requirement, reading the documents and pictures the answer cites, and suggests a score, gaps and recommendations, consolidates the gaps of a product, a group of products or your whole portfolio, and drafts a roadmap. It can also improve the wording of a text without changing its meaning. Scoping runs when a product is created or its description changes. Everything else runs only when you click, never in the background.

No, the AI is optional. You can run the whole assessment by hand: write the evidence, score each answer, record gaps and recommendations, plan the roadmap and have the product reviewed, without a single AI run. Drafts from your documents, audits, consolidated gaps and the AI roadmap start only when you click their button. The one automatic step is the scoping of a product from its description, which you can override with your own assessment.

From your product description. The AI applies the CRAscoping.com method to tell whether the product is in scope, whether it is a default, important (class I or II) or critical product, and which conformity assessment route follows, with its reasoning. You can override the result at any time, and both the AI result and your decision stay visible on the product.

The AI works from cetome's CRA knowledge: the Essential Requirements, their interpretation, our assessment method and our priorities. Its outputs are structured and checked against the regulation text, so it cannot invent a requirement or a standard.

No. AI output lives in its own channel, labelled AI Generated or AI Enhanced, next to your human record. A person reviews it, then accepts, edits or rejects it, and accepting a draft can be undone. Verdicts are given by people only, and your data is never used to train models.

Timelines & Harmonised Standards

Instead of spending weeks interpreting the regulation, CRAted guides you to evaluate your first product in under an hour. You get an immediate report with your complete CRA compliance assessment. You can review the evidence yourself straight away, hand the product to an external reviewer (Elite), or to colleagues once you have colleague seats (Elite add-on) or an Enterprise licence.

We monitor the official developments. As harmonised standards are approved, your products can use them immediately. Because they align with the Essential Requirements, your tracking stays accurate without manual effort.

A report of your security posture against the CRA Essential Requirements (Annex I), with the evidence and the documents it refers to, the reviewers' verdicts and comments, the gaps, the recommendations and the roadmap, exportable to Excel.

Product Portfolio & Tiers

Pro covers up to 4 products with the full questionnaire, drafts from your documents, the AI audit, product comparison, consolidated gaps, profiles, roadmaps and the review workflow with verdicts and history. Elite covers up to 10 products with a larger AI allowance and adds Excel export, product cloning with linked products, groups of products that you compare side by side, and external reviewers such as auditors who see only the products shared with them. Two add-ons are available on Elite only: additional product slots as your portfolio grows, and colleague seats to work on the same products with roles (100 € per slot or seat per month excl. VAT).

Enterprise is a negotiated licence: everything in Elite and the organisation (seats, roles, time-boxed delegation), licensed per user and per product, plus bring-your-own AI key or model, self-hosted deployment and dedicated support. Colleagues, roles and delegation are also available on Elite by adding colleague seats (100 € per seat per month excl. VAT). Verdicts and the product history are on every plan.

Yes. Elite and Enterprise users organise products into groups, apply profiles to a whole group, compare one group with another, consolidate their gaps and monitor the portfolio from a single dashboard. Organisations add roles per product and per group of products.

You can change your subscription at any time through the secure billing portal. Upgrading keeps your data intact and unlocks the additional features immediately.

Account Management

Every new account created with a work e-mail address gets every feature on up to four products for 14 days, without a card. The 14 days start when you confirm your e-mail address. One trial per company, whatever the address or subdomain used, and free-mail or disposable addresses start on the Free tier. When the trial ends, your account moves to the Free tier: your oldest product stays editable, and nothing is deleted. Your other products, profiles and roadmaps stay in your account for as long as it exists and come back the moment you pick a plan. Three things are not part of the trial: external reviewers, the Excel export and the add-ons (extra slots, colleague seats). All come with Elite.

A downgrade from Elite to Pro is not automatic. Contact us through the contact form and we will review your request.

You keep every paid feature until the end of your current plan. Afterwards your account moves to the Free tier with limited features. CRAted keeps your assessments for 3 months before deleting them.

Contact us through the contact form. We review the possibility of a pro-rated refund case by case.

Ready to secure your EU market entry?

Create your account, try almost every feature for 14 days on your own products, and be ready before enforcement begins.

Start your 14-day trial