Vulnio
Tells you whether the CRA covers your product and when its 24-hour reporting clock may have started, from your SBOM.
- For
- Website checks
- Status
- Beta
- Price
- Free scan · from €29/mo
How it works
Know When the CRA's 24-Hour Reporting Clock May Have Started
Vulnio is for small software and connected-device makers selling in the EU.
-
1 Sign up free Create your account on the Vulnio site. The first step costs nothing.
-
2 Let Vulnio do the job Tells you whether the CRA covers your product and when its 24-hour reporting clock may have started, from your SBOM.
-
3 Grow when you need to Current price: Free scan · from €29/mo. Plans and limits are on the product site.
Key features
Key Features
From a lock file to a report draft
-
Free CRA Scope Check with Article References
-
SBOM and Lock File Scan (CycloneDX, SPDX, npm, Composer, Python, Go, Rust, Maven)
-
Actively Exploited Matches from CISA KEV and ENISA EUVD First
-
Daily Re-Scan and E-Mail Alerts
-
Art. 14 Deadlines: 24 h, 72 h, Final Report
-
Report Drafts in the Order of ENISA's Platform Fields
Ready to start with Vulnio?
About a minute, no account. Exploited matches are listed first.
Related products
Built for the same job
Vulnio is part of the Talivio product family. Explore our other tools.
- TCSR A free security snapshot of any domain, and a deep assessment of domains you own. Learn more →
- A11yProof Scans your site against WCAG 2.2 AA and EN 301 549 and gives you an A–F graded audit with monitoring. Learn more →
- PrivaScan Shows every tracker and cookie that fires before a visitor consents, in a real browser. Learn more →
FAQ
Frequently asked questions
Does an automated scan make my site compliant?
No. Automated tools catch roughly 30–40% of WCAG criteria. A11yProof, PrivaScan and TCSR give you graded evidence and monitoring, never a compliance guarantee; a manual expert review is still recommended for a full conformance claim.
Can I try them before paying?
Yes. A11yProof, PrivaScan, TCSR and Citablio each run a free scan without a subscription, and CanopyProof starts on a free plan. The prices on each card are the products' own current prices.
Which deadlines apply?
The European Accessibility Act has applied since 28 June 2025. GDPR consent rules apply today. The first EUDR obligations apply from 30 December 2026.