Free CRA tools: security.txt and SBOM-in-CI generators

Free toolsFree browser tools for small software teams preparing for the EU Cyber Resilience Act: a security.txt generator (RFC 9116) and a CycloneDX SBOM-in-CI snippet generator. No sign-up.This site needs JavaScript for the scope checker and the waitlist form.

Home
Does the CRA apply to your product?
The Shieldbook kit
Free sample: the disclosure policy template (K03)
About Shieldbook
Cyber Resilience Act guides
CRA checklist for small teams (by article, dated)
CRA for firmware and IoT makers: classes, CE marking and the declaration of conformity
The EU Cyber Resilience Act (CRA) for mobile apps: what app makers must do and by when
Does the Cyber Resilience Act apply to SaaS?
CRA and open source: what maintainers, stewards and small commercial projects owe
CRA vulnerability reporting: the 24-hour, 72-hour and final report, explained
CRA SBOM requirements: what you must have, which format, what is not required
How to write a vulnerability disclosure policy and a security.txt for the CRA
Free tools
security.txt generator
SBOM-in-CI snippet generator
Privacy notice
Vulnerability disclosure policy
Contact us
Licence
Refund policy
Terms of sale