Software

CRA Companion Software

Organize EU Cyber Resilience Act evidence, manage AI-discovered findings and monitor software bills of materials (SBOMs) for vulnerabilities with CRA Companion.

play_arrow pause

Close cancel

Get connected with our team

Thanks for your interest in our products and services. Let's collect some information so we can connect you with the right person.

* By ticking this box, I confirm that I have read and understood the Online Policy and consent to the processing of my personal data as described therein.

* By ticking this box, I consent to the cross-border transfer of my personal data as described in the Online Policy.

I agree to receive UL Solutions marketing communications and understand that I can opt out at any time without affecting other services by visiting our Preference Center.

Thank you!

One of our team members will respond to your request as soon as possible.

Assess CRA readiness with confidence

CRA Companion reduces the complexity and manual effort of preparing for and maintaining Cyber Resilience Act compliance by connecting products, evidence, findings, and SBOM vulnerabilities in one structured workflow.

A practical way to manage CRA readiness

CRA Companion enables you to:
 

• Simplify required evidence via UL-curated checklist
• Monitor software bill of materials (SBOMs) for vulnerabilities
• Analyze CRA evidence with AI-assisted review and access to expert support
• Share conformity status with relevant stakeholders
• Accelerate definition of CRA-conformant processes with CRA Process Framework

How CRA Companion works

Manage evidence

Organize documentation against a structured evidence model

Analyze readiness

Review evidence findings and SBOM-related vulnerabilities.

Assess

Perform self-assessment or prepare for third-party assessment, as applicable

Share status

Give suppliers and OEMs clearer visibility across the supply chain

Designed for connected supply chains

For OEMs and product manufacturers

Assess CRA readiness, improve the consistency of compliance information, and monitor component supplier conformance.

For component suppliers

Organize evidence once, assess readiness consistently and share compliance status with OEM customers more efficiently

Part of a broader CRA readiness offering

Combine CRA Companion with the CRA process framework, Stages process governance software and CRA advisory services to support a more structured approach from requirements through execution

Why UL Solutions

UL Solutions combines safety science, software and advisory expertise to help organizations address security, compliance and complex supply chain challenges.

Get started with CRA Companion for your digital products and explore the benefits of a structured environment for CRA evidence assessment, SBOM insights and supplier compliance visibility.

Like to trial CRA Companion or have a question?

Related services

Guide to the Cyber Resilience Act

Learn more about the European Cyber Resilience Act (CRA) that aims to enhance the cybersecurity of products with digital elements sold within the EU.

EU Cyber Resilience Act (CRA) Compliance Services

Access end-to-end support for your EU Cyber Resilience Act compliance strategy, including scope assessment, secure-by-design engineering, technical documentation and post-market reporting.

Cross-industry and CRA

A ready-to-tailor process framework that helps manufacturers translate EU Cyber Resilience Act requirements into governed engineering activities, responsibilities and evidence across the product lifecycle—supporting consistent, audit-ready compliance with Stages and CRA Companion.