CRA Compliance for WordPress DevelopersPrepare your WordPress plugins and themes for the EU Cyber Resilience Act (CRA) before the September 2026 deadline.Features

26-point compliance checklist mapped to CRA articles

Document generator: vulnerability disclosure policy, incident response plan, SBOM, EU Declaration of Conformity

Vulnerability scanner connected to the WPScan database

Incident center with ENISA 24-hour reporting timeline

PDF compliance reports and CycloneDX SBOM export

Who needs to comply?The CRA applies to every WordPress plugin, theme, or commercial product placed on the EU market, regardless of where the developer is based.View plans and pricing | CRA Resources | Privacy Policy | Terms of Service | Contact