CSAF, CRA, SBOM and VEX – explained clearly, plus news from product development.
Since 11 September 2026, CRA reporting duties apply: 24-hour early warning, 72-hour notification, final report. Deadlines, key terms and a checklist.
Verify your domain, create keys, publish your first advisory: how to become a trusted provider – in one afternoon.
SBOMs show what's inside. VEX tells you whether it affects you. CSAF carries both. An overview.
New articles and releases once a month by email.
