CRA control room for connected products

Your CRA readiness control room.

kromse gives product, legal and security teams one place to track exposure, evidence gaps, vulnerability cases and the work needed before EU deadlines arrive.

Built for alarms, drones, cameras, sensors, smart locks, routers, wearables and other connected products sold in Europe.

Book a product check-up See what gets tracked
CRA readiness 78% +4 pts this week
Early warning 19h 54m Regulatory clock active for a high-priority vulnerability case.
Evidence gaps 4 items blocking report approval Legal review, supplier proof, release notes and response owner.
Audit output Draft report ready Internal summary, action owners and 90-day readiness plan.
Product intelligence SBOM and supplier risk synced Connected product data feeds the readiness model.
Respond Track vulnerability clocks, owners and report status.
Comply Keep evidence, reports and SBOM work visible.
Monitor Watch product risk and supplier gaps over time.
New EU rules

Cybersecurity is becoming part of selling connected products in Europe.

The Cyber Resilience Act creates cybersecurity obligations for many products with digital elements. The challenge is knowing what applies, what evidence is missing and who owns the work.

10 Dec 2024
The law is approved

The preparation window begins.

11 Jun 2026
Market preparation accelerates

Companies, advisors and partners start preparing.

11 Sep 2026
Fast reporting duties begin

Serious vulnerabilities may need quick reporting.

11 Dec 2027
Main obligations apply

The broader CRA framework becomes applicable.

The problem

Hardware companies are being asked cybersecurity questions they were not built to answer.

Connected-product teams often need to coordinate management, product, suppliers, operations, legal and technical contacts before they can even see the full compliance picture.

?

Does this law affect us?

Products with software, apps, cloud features, wireless links or remote updates may need attention.

1

What do we need to do?

Teams need a plain-language list of documents, processes, checks and responsibilities.

2

Where is the proof?

Security claims need organised evidence that can be reviewed later.

3

Who owns each task?

Suppliers, product teams, legal and leadership all touch different parts of the answer.

4

What if something goes wrong?

A serious security issue needs a response plan before the emergency happens.

5

We do not have a cyber team.

kromse is designed for product companies, importers and distributors, not only security experts.

Who we help

Built for companies that sell connected physical products.

kromse is useful when your product includes software, firmware, an app, a cloud feature, wireless connectivity or remote control.

Alarm and security companies

Alarms, sensors, cameras, smart locks and monitoring devices.

Drone and robotics sellers

Drones, robots, controllers, apps and cloud-connected devices.

Smart device brands

Smart home, wearables, pet tech, appliances and gadgets.

Importers and distributors

Connected products brought into the EU from suppliers abroad.

Industrial hardware companies

Machines, sensors, gateways and equipment with embedded software.

What kromse does

kromse turns CRA uncertainty into a practical action plan.

We help identify what applies, what is missing, what should be fixed first and what proof your team should keep.

1

Check exposure

Understand whether your products may fall under CRA obligations.

2

List gaps

See missing documents, policies, supplier information and security processes.

3

Map product data

Organise software, firmware, apps, suppliers and product versions.

4

Find known risks

Check whether public vulnerabilities may affect your products or suppliers.

5

Prepare evidence

Build a simple proof folder for product cybersecurity readiness.

6

Create a response plan

Define who does what if a serious product security issue appears.

How it works

From uncertainty to a clear product compliance plan.

1

Tell us what you sell

Share basic product, supplier, app and connectivity information.

Output: product map
2

Check possible CRA exposure

Translate the regulation into product-specific questions.

Output: affected product list
3

Find the gaps

Identify missing evidence, documents, processes and owners.

Output: gap report
4

Get a simple plan

Prioritise what to fix, document and assign over the next 90 days.

Output: action plan
First step

Start with a Connected Product Check-up.

Before selling you a platform, kromse starts with a focused 1-2 week check-up. We review your products, explain possible CRA exposure and give you practical next steps.

Book a product check-up
Product exposure checkWhich products may be affected and why.
Missing documents listWhat proof, policies and supplier information you still need.
Basic risk reviewA first look at vulnerabilities, software parts and supplier risks.
Emergency process checkWho should do what if a serious issue appears.
90-day action planClear next steps for management, product, suppliers and technical teams.
Ready-to-use templatesSimple templates for responsibilities, evidence and incident preparation.
Starting point

Start with a check-up. Move to ongoing monitoring only if you need it.

Pricing is a market-validation hypothesis and may evolve based on pilot learnings.

Connected Product Check-up

For companies that need clarity quickly.

Get prepared for the CRA
From €9.99950% discount
€4.999

Exposure check, missing documents list, basic risk review, emergency process check and 90-day plan.

Book a meeting

Ongoing Product Readiness

For companies with several connected products or suppliers.

SaaS

Product list, supplier tracking, security issue alerts, proof folder and team task tracking.

Book a meeting

Expert Review Add-on

For companies that want extra confidence.

Custom

Legal review, cybersecurity review, supplier support and management-ready summary.

Book a meeting
Book a meeting

Book a 30-minute CRA product check-up call.

Choose a time directly on this page. We will use the call to understand what you sell, whether CRA may affect your products, and what the next practical step should be.

This is an initial screening, not a legal opinion.

Fast fit check Confirm whether a connected product check-up is relevant for your company.
Clear next step Leave with a practical view of what information we would need next.
No email back-and-forth Pick the slot that works for you and receive the invite automatically.
FAQ

Questions companies ask first.

What is the Cyber Resilience Act?

It is a new EU regulation that creates cybersecurity requirements for many products that contain software or connect to other systems.

Does it apply only to big technology companies?

No. The CRA is mainly about the product, not only company size. Medium-sized companies selling connected devices may still need to prepare.

Is kromse a lawyer?

No. kromse helps organise the work, documents and checks. Formal legal advice should be reviewed by qualified legal experts.

Is kromse a cybersecurity auditor?

No. kromse does not replace an official audit or certification provider. It helps you understand what may be missing.

Who should join the first call?

Usually a business owner or manager, someone close to the product, and anyone who manages suppliers, documentation or technical support.

What happens after the check-up?

You receive a practical gap report and 90-day action plan. Ongoing monitoring can come later if your product portfolio needs it.

Make product cybersecurity readiness visible before the deadline arrives.

kromse helps your team move from uncertainty to a practical, trackable plan.

Book a meeting
Book a meeting