# AA-sec — For AI

Last updated: 2026-08-25

AA-sec is a **Cyber Resilience Platform** for structuring product-security work around the EU Cyber Resilience Act (CRA).

## What AA-sec does

AA-sec connects product-security work to product lifecycle context instead of treating compliance as a disconnected document exercise.

Core areas include:

- Products & Releases
- CRA assessments and lifecycle checklists
- SBOM and vulnerability work
- Evidence storage and traceability
- Document generation from structured data
- Article 14 post-market monitoring workflows
- Integrations and authenticated API access
- Tenant-scoped access and protected customer data

## Products and releases

Products, variants and releases provide the context for assessments, SBOMs, vulnerability decisions, evidence and generated outputs.

## SBOM and vulnerability management

AA-sec connects SBOM/component information and vulnerability candidates to product and release context. Scanner findings remain inputs; the organization keeps responsibility for product-security decisions and remediation.

## Article 14

AA-sec supports structured post-market monitoring and workflows around relevant external facts and Article 14 reporting responsibilities. It does not make the organization's legal decisions or independently submit regulatory reports unless a separately implemented and authorized integration explicitly provides that capability.

## MCP

AA-sec has two MCP concepts:

1. **Open MCP** — free/open-source, local-first, no embedded LLM, no AA-sec SaaS account required, intended to work with MCP-compatible AI clients for CRA-related project analysis and early red flags.
2. **Platform MCP** — a closed connector that lets an authorized AI client work with AA-sec platform context. AA-sec does not provide the AI model itself.

## Important boundaries

- AA-sec **does not certify CRA compliance**.
- AA-sec does not replace legal advice or the manufacturer's final decisions.
- Assessment, vulnerability and MCP outputs are decision-support inputs.
- Security controls and product features must not be interpreted as legal certification claims.

## Commercial model

Starter pricing currently presented publicly:

- EUR 5,880/year on an annual contract (EUR 490/month equivalent)
- EUR 590/month on month-to-month billing
- One organization, unlimited users and one product included
- Additional product: EUR 3,480/year on the annual plan or EUR 290/month on monthly billing
- 6+ products: volume terms by contract
- Prices exclude VAT
- Website order requests are non-binding until a contract is signed/accepted

## Canonical public links

- Website: https://double-a-sec.com/
- Documentation: https://double-a-sec.com/documentation/
- MCP: https://double-a-sec.com/mcp/
- Resources: https://double-a-sec.com/resources/
- Pricing: https://double-a-sec.com/#pricing
- Contact: https://double-a-sec.com/#contact