EN
FrançaisEnglishPolski
Analyse a file
FeaturesDependency analysisCode analysisWebsite scannerGitHub, CI and coding assistantsClient reportCRA for software vendors
Analyse a file
FrançaisEnglishPolski

CRA deadlines, tracked for each product.

For software vendors: Tamiso spots actively exploited vulnerabilities in your products, works out the reporting deadlines and prepares the drafts.

Reserve Publisher Included in the Publisher plan

boutique-en-ligne

For an actively exploited vulnerability in boutique-en-ligne: early warning within 24 h, notification within 72 h, final report no later than 14 days after a fix is made available. Sent through ENISA's single reporting platform.

Actively exploited vulnerabilities to handle

CISA KEV catalogue, latest project version

No vulnerability in the latest version is in the exploited vulnerabilities catalogue. Tamiso checks again every day.

Deadlines follow Article 14 of Regulation (EU) 2024/2847, applicable since 11 September 2026. The drafts contain what Tamiso knows; complete them and have them checked: Tamiso sends nothing on your behalf and does not replace legal advice.

How it works

The Article 14 deadlines

Early warning within 24 h, notification within 72 h, final report no later than 14 days after a fix is available.

Drafts, not submissions

Tamiso fills in what it knows about the vulnerability and the product. You complete it, have it checked and submit it yourself through the ENISA reporting platform.

CSAF 2.0 VEX and SBOM

Your decisions exported as CSAF 2.0 VEX, valid against the OASIS schema, and the CycloneDX SBOM of each version.

Included in the Publisher plan149 € excl. VAT per month, 10 products, up to 10 people, everything in Studio.
Reserve Publisher