OCCTET: An Open Source Lifeline for CRA Compliance in Europe

28.05.2025

Jitendra Palepu

CRA

Open Source Everywhere — And a New Challenge On any given day, tech companies in Europe are shipping products with digital elements. Under the hood, chances are it’s running a wealth of Open Source-code. From encryption libraries to web frameworks, Open Source has become the backbone of digital innovation—indeed, a typical modern software product is often over 90% Open Source

Read more

Understanding the Cyber Resilience Act and Its Impact on the Automotive Industry

28.03.2025

Jitendra Palepu

CRA

As cars become more like computers on wheels, cybersecurity is becoming a major concern. With vehicles now connected to the internet and relying heavily on software, protecting them from cyber threats is essential. The Cyber Resilience Act (CRA) is a new European law designed to improve cybersecurity for digital products. While it does not directly apply to cars themselves (since

Read more

The Critical Role of Scanning Depth and SBOMs

12.12.2024

Dr. Andreas Kotulla

CRA

Navigating Open-Source-Compliance in 2024: The Critical Role of Scanning Depth and SBOMs In the evolving landscape of cybersecurity and software compliance, the importance of open source compliance cannot be overstated. New regulatory requirements like the Cyber Resilience Act (CRA), the Network and Information Security Directive (NIS2), and the Digital Operational Resilience Act (DORA) have introduced stricter obligations for organizations, especially

Read more

Bisquat2: What is hiding there?

23.07.2024

Leoni Tischer

CRA

Today, we are shedding light on a topic that is still all too readily overlooked as the “little sister of programming”. What hardly anyone cared about 20 years ago is to be placed under state control in the immediate future! As we now know, a major focus of Bitsea is checking for hidden risks in software. Many people typically first

Read more

The Cyber Resilience Act (CRA) and the Management of Open Source

09.07.2024

Dr. Andreas Kotulla

CRA

Open source is everywhere: Hardly any product today can do without digital components, from electric toothbrushes and baby monitors to smartwatches. Less obvious to many users is the security risk that such products pose for the end users. The new European Cyber Resilience Act (CRA) aims to ensure that consumers receive secure products. The regulation was announced in the EU

Read more

Quickstart: CRA (Cyber Resilience Act)

05.04.2024

Roman Yankin

CRA

What is Cyber Resilience Act? The European Cyber Resilience Act (CRA) aims to set the boundary conditions for the development of secure products with digital elements by ensuring that hardware and software products are placed on the market with fewer vulnerabilities and that manufactures take security seriously throughout a product’s life cycle. It was introduced by the European Parliament in

Read more