Curated resources for the EU Cyber Resilience Act (Regulation 2024/2847): regulation, harmonised standards, EUCC, SBOM, vulnerability management, conformity assessment
-
Updated
Oct 18, 2026
Curated resources for the EU Cyber Resilience Act (Regulation 2024/2847): regulation, harmonised standards, EUCC, SBOM, vulnerability management, conformity assessment
Automated CVE alerting/reporting tool based on ENISA vulnerability database
The most comprehensive open-source mapping of OWASP GenAI risks to industry frameworks - 70 mapping files, 25 frameworks, 1,016 controls, 125 incidents, ML classifier pipeline. Source lists: LLM Top 10, Agentic Top 10, DSGAI 2026. EU AI Act, NIST, ISO, SOC 2, FedRAMP, DORA, OT/ICS, MITRE ATLAS.
Comprehensive and zero dependency Go library for the ENISA EU Vulnerability Database (EUVD) API. Instantly access real-time vulnerability data, security advisories, CVSS scores, and more.
An auditable dataset containing TLS requirements to assess a webserver's compliance with national cybersecurity agencies
Open NIS 2 supply-chain security questionnaire as a typed Zod schema, for any supplier. 50 fields in 4 sections, each anchored to NIS 2 Art. 21(2)(d) and (3), CIR 2024/2690, ENISA TIG, GDPR or the CRA, with ISO/IEC 27001:2022 controls. JSON and JSON Schema included.
Curated open index of EU cybersecurity and data protection compliance resources: NIS 2, GDPR, DORA, EU AI Act, Cyber Resilience Act and ePrivacy. Official regulations, ENISA and BSI IT-Grundschutz guidance, national authorities, open-source schemas and toolkits.
Data summarization of the European Cybersecurity Skills Framework (ECSF) from The European Union Agency for Cybersecurity (ENISA).
Go vulnerability data aggregator with EU CRA compliance - 28 providers including EU-specific feeds (KEV, EUVD, BSI CERT-Bund, CERT-FR)
Open-source CLI for preparing EU Cyber Resilience Act (Regulation 2024/2847) Article 14 notifications for the ENISA Single Reporting Platform.
CLI tool for BSI TR-03183-2 SBOM generation, enrichment, validation, and submission. CycloneDX 1.6 / SPDX 2.3 compliant. AGPL-3.0 licensed.
SBOM and known-vulnerability monitoring for the EU Cyber Resilience Act: npm, Composer, Android, iOS. GitHub Action with an exploited-in-the-wild clock for Article 14 reporting.
24 hours starts the moment you know. The EU Cyber Resilience Act Article 14 reporting clock as a GitHub Action: SBOM, actively exploited vulnerability detection (CISA KEV), ENISA drafts.
Free CRA Article 14 reporting kit: deadlines, ENISA platform fields, CVD policy template
Curated official sources, national authorities, standards & free tools for NIS2, the EU AI Act and the European Accessibility Act (EAA).
Learning repository connecting EU AI Act and GDPR concepts with AI/security governance frameworks, mappings, case studies and implementation-oriented checklists.
🔌 Exposes EU CRA Article 14 actively-exploited-vulnerability reporter - ENISA + CSIRT payload. 11 Sept 2026 cliff. MIT. By MEOK AI Labs.
EU Cyber Resilience Act Article 14 reporting clock. Records the moment of awareness, computes the 24h and 72h deadlines and the 14-day final report deadline once a fix is available, drafts the ENISA/CSIRT notifications and exports CSAF 2.0. Offline, MIT. Applies from 11 September 2026.
Rust client library for ENISA's European Union Vulnerability Database (EUVD). Async API with rate limiting, typed models, and full search/advisory support.
To associate your repository with the enisa topic, visit your repo's landing page and select "manage topics."