craclock, the EU vulnerability-reporting clock

Field notes

craclock centers its workflow on the moment a team becomes aware that a shipped product is being exploited, rather than the later act of completing a report. Its displayed sequence covers a 24-hour early warning, a 72-hour notification, and a final report 14 days after a fix. The site says ENISA's portal has no API, so the proposed output is a package users paste manually. The CLI and several automation features are presented as planned rather than verified current functionality.