Compliance and Cyber Resilience Act

Software vendors and industrial buyers / compliance teams

Code analysis, audit trails and governance to prove CRA compliance and reduce sanction risk.

What it solves

CRA obligations from 2027 without an internal process
Code vulnerabilities not tracked
No demonstrable audit trail in case of an incident

The Cyber Resilience Act introduces strict obligations for anyone placing software on the European market. Cerbercode analyzes the code and produces the evidence you need; MQAnalyzer and SQLConverter complete governance and data traceability.

What the bundle includes

Product	Role in compliance
Cerbercode	Source and binary analysis + technical dossiers (CRA, NIS2, ISO 27001) ready for the Notified Body
MQAnalyzer	Governance and traceability of messaging flows, with audit trail
SQLConverter	Data traceability, audit trail and SQL security scanner

From code to evidence

Continuous scanning, not a one-off snapshot: every new release is covered.
Automatic dossiers: CRA Annex V technical file, Declaration of Conformity, SBOM.
Audit trail and vulnerability management, demonstrable during an incident or audit.

What it includes

Cerbercode at the core + MQAnalyzer / SQLConverter cross-sell

Cerbercode

Software security analysis orchestrator for Python, JS/TS, Java, C#, C/C++ and Infrastructure-as-Code: coordinates 12+ consolidated scanners, normalizes results in SARIF and CycloneDX SBOM, deduplicates findings and maps them to the Cyber Resilience Act (EU Reg. 2024/2847). On-premise: code never leaves the customer perimeter.

da 4.800 €/anno

Licensing and ownership

All included software is owned by Objlab S.r.l. and granted under a proprietary end-user licence: it is not open source and is not resold as such. Where a product embeds third-party open-source components, those remain subject to their own licences and do not affect Objlab's ownership of the product. Delivery is on-premise or on private cloud through the Objlab Application Hub.

Talk to a CRA expert See all products