Digital connectivity brings immense value, but it also demands a new level of protection. With the EU Cyber Resilience Act (CRA), the European Union is setting strict standards for reporting security incidents and vulnerabilities starting September 11, 2026. The good news for our customers and partners: We have completed our preparations early.

We have established all necessary processes and structures to fully comply with the CRA requirements going into effect in September 2026.

What does this mean for you in practice?

• Real-time transparency on vulnerabilities: Should critical security gaps be identified or actively exploited in our products, our newly structured reporting and analysis processes take effect immediately. We will inform the relevant authorities (such as ENISA) within the required deadlines.
• Rapid patch management: Thanks to the direct integration of our vulnerability management with early warning systems, security updates will be fed into our development pipeline even faster.
• Proven resilience: Our internal organization has been adapted to the new EU regulations - ranging from incident tracking to a clear incident response chain.

Looking ahead: Our roadmap to 2027

The CRA is not a one-time project, but an ongoing standard. While the September 2026 milestone focuses on reporting mechanisms, we are already working behind the scenes on the next phase for December 11, 2027