Observed arrival · 2026-10-31
Wardhour’s hourly watch for CRA reports
Wardhour describes monitoring components in connected products and drafting Cyber Resilience Act vulnerability reports for makers to review and submit.
- For
- UK and Irish makers of connected products sold in the EU
- Worth noticing
- The sample log follows 412 components across five products and shows an exploited XML parser affecting two named devices.
Field notes
The page separates work into four steps: makers supply an SBOM or package and firmware manifests; Wardhour says it checks listed components hourly against vulnerability and known-exploited lists; alerts identify affected products and start a deadline clock; report drafts are left for the maker to review and submit. Its illustrative watch log follows five products and 412 components, including an XML parser flagged in Hub Mini and Gateway G2. The page describes a private beta beginning January 2027, so the workflow is presented rather than independently demonstrated.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue