Manufacturers
Teams placing products with digital elements on the EU market and maintaining them.
Secure by Evidence
Cyber Resilience Platform
Structure the CRA product-security work you already do — products, releases, assessments, SBOMs, vulnerabilities, evidence, documents and post-market monitoring — in one connected lifecycle.
Who the CRA affects
Product security becomes a lifecycle responsibility.
The Cyber Resilience Act creates obligations around products with digital elements across development, release, vulnerability handling and the support period. The exact legal role and scope depend on your product and position in the supply chain.
Software product teams
Teams that need repeatable security evidence across releases, components and support.
Importers & distributors
Organizations that need reliable product-security information from their supply chain.
The problem
The work already exists. AA-sec connects it.
Security work is usually spread across tickets, spreadsheets, scanners, repositories and documents. CRA increases the cost of that fragmentation because decisions need context, evidence and lifecycle traceability.
Evidence is scattered
Release decisions and supporting material are hard to reconstruct later.
Vulnerability context is lost
Scanner findings are not the same as product decisions, ownership or remediation status.
Compliance becomes manual coordination
People spend time collecting status instead of improving the product.
Who we are
Engineering discipline applied to product security.
AA-sec is built by engineers used to traceable decisions, repeatable QA and long product lifecycles. We use that discipline to make CRA work operational instead of document-only.
Why trust the approach
- Critical-safety engineering discipline
- QA-grade repeatability
- Evidence by design
- Made for us, done for you
How AA-sec helps
One product lifecycle. One connected source of evidence.
AA-sec Platform links the work from product definition through release and post-market monitoring without replacing the engineering tools your teams already use.
01Product
02CRA Lifecycle
03SBOM
04Vulnerabilities
05Evidence
06Documents
07Monitor
What the platform includes
AA-sec Platform
Each capability stays connected to products and releases so the status you see has context and the evidence behind it remains traceable.
Products & Releases
Structure products, variants and releases and keep security work attached to the lifecycle it belongs to.
CRA Lifecycle
Run structured CRA assessments and checklists while keeping the final decision with your organization.
SBOM
Connect SBOMs and component information to the product and release they describe.
Vulnerabilities
Track vulnerability candidates, decisions and remediation context instead of stopping at a scanner result.
Evidence
Keep supporting material connected to the decisions, assessments and releases it proves.
Documents
Generate repeatable outputs from structured product and evidence data.
Article 14 Monitoring
Support post-market monitoring and structured handling of relevant external facts and reporting workflows.
Integrations & API
Connect existing engineering and security workflows through APIs, service access and integrations.
Security by design
Your product-security evidence deserves product-security controls.
The platform is designed around tenant-scoped access and protected customer data. Security claims are kept separate from legal compliance claims.
Tenant isolation
Authorization and data access are scoped to the customer organization.
Protected data
Confidential values and customer files use application-level protection controls.
EU hosting
Our hosted service is positioned for EU customers with GDPR requirements in mind.
Independent assurance
Planned annual independent security reviews as the service moves through commercial rollout.
See the workflow
Explore the product surface.
The demo is a separate environment for exploring the product experience. It does not change the website deployment and is maintained independently.
Pricing
Same platform. Choose how you contract.
All platform features included. The base subscription includes one organization, unlimited users and one product.
Annual
Starter — yearly contract
€490
per month, billed on an annual contract
- 1 organization
- Unlimited users
- 1 product included
- All platform features included
- Free onboarding for annual contracts
Monthly
Starter — monthly billing
€590
per month
- 1 organization
- Unlimited users
- 1 product included
- All platform features included
- Flexible month-to-month billing
Additional products: +€290 per product/month. 6+ products: volume terms by contract. Onboarding: €4,900 one-time where not included. Training: €3,000/day. On-prem from €12,000/year. Custom integrations: T&M. Prices exclude VAT. Non-binding request until the contract is signed.
Small Business Program
Smaller team, same CRA workload?
Tell us about your product and company. We review Small Business Program requests individually rather than removing platform capabilities.
Contact
Start with your product.
Ask a question, request a plan or tell us about your Small Business Program case. We will respond with the next concrete step.