An independent guide to product security obligations.
Plain-language research for teams that need to connect legal text to product decisions.
What this site does
CyberResilienceAct.help organises public CRA information around products, economic-operator roles and the work of building and supporting secure products. Regulatory claims are linked to the official legal text and European Commission guidance.
What this site does not do
It is not an official European Union site, regulator, notified body, certification service or law firm. The content is general information, not legal advice or a determination of whether a particular product complies.
Editorial approach
We separate verified requirements from practical implementation frameworks and point to primary sources. Product-specific scope, classification and conformity questions should be checked against current law and qualified advice.