Observed arrival · 2026-10-15
Duravigil watches connected-device software for CRA reporting
A monitoring and reporting service for manufacturers and importers of connected devices, focused on the EU Cyber Resilience Act.
- For
- Connected-device makers and EU importers
- Worth noticing
- The illustrative thermostat dashboard shows 214 components, a 9.6/10 SBOM score after enrichment, and a 24-hour report countdown.
Field notes
The site separates obligations by role: manufacturers and white-label brands are described as already subject to reporting, while importer checks and broader security requirements are presented as beginning 11 December 2027. Its sample thermostat view lists 214 components, a 9.6/10 SBOM score after enrichment (2.5 before), and a security.txt check; the page labels the dashboard illustrative. It also says firmware is handled only after a mutual NDA and that its platform is hosted in the EU.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue