Observed arrival · 2026-10-21
Fristal puts the CRA reporting clock on a checklist
Fristal monitors software components for known vulnerabilities and helps manufacturers prepare the timed reports required by the EU Cyber Resilience Act.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Software and connected-device manufacturers selling in the EU
- Worth noticing
- The manufacturer still submits reports through ENISA; Fristal offers pre-filled fields and exports a printable page or JSON.
Field notes
The setup accepts a lockfile or an existing SBOM; the page names npm, pip, Cargo and Go among supported lockfile formats. It describes daily checks against OSV.dev and the CISA Known Exploited Vulnerabilities catalogue, with alerts sent by email and, on Team, to a team. The reporting fields can be exported as a printable page or JSON, but the manufacturer must submit them through ENISA.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue