For manufacturers
CRA makes you responsible for evidence you don't control.
A PolkaSpots product
ForgeCRA
Neutral network for supplier SBOM attestation under the EU Cyber Resilience Act.
Under the CRA, the manufacturer is responsible for evidence that sits with suppliers. Existing tools analyse what a manufacturer already holds; they cannot make a supplier send anything. ForgeCRA collects, quality-scores and attests SBOMs across company boundaries — one publication from the supplier, served to every customer who needs it.
For suppliers
Publish once. Serve every customer.
Two different offers. Choose the one that matches your role.
Not sure which applies to you? Book a 30-minute call →