Observed arrival · 2026-10-05
Relvault’s release-by-release CRA evidence
A human-reviewed CRA evidence service for device makers, preparing release SBOMs, vulnerability records, VEX drafts and ENISA report templates.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Device makers with 10–249 staff
- Worth noticing
- SBOMs are offered in CycloneDX, with SPDX available on request; the site says each file includes a note on gaps.
Field notes
The page explains Article 14 reporting as separate clocks: 24 hours for an early warning, 72 hours for notification and a final report due after a fix or mitigation. Its listed SBOM output is CycloneDX, with SPDX available on request, and the site says files include a gap note. These are presented as Relvault’s service scope; the homepage also says the customer decides whether to report and files each report.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue