The EU Cyber Resilience Act (CRA), introduced in December 2024, mandates baseline cybersecurity requirements for all digital products sold in the EU, with key deadlines in September 2026 (mandatory vulnerability reporting) and December 2027 (full product compliance). It introduces product-level obligations including shipping without known vulnerabilities, generating SBOMs, ensuring DoS resilience, and providing security updates for at least 5 years. Aikido Security positions itself as a compliance platform covering SAST, SCA, DAST, CSPM, container scanning, IaC scanning, secrets detection, SBOM export (CycloneDX/SPDX), runtime protection via RASP (Zen), and autonomous penetration testing — all aimed at helping engineering and security teams meet CRA requirements alongside other frameworks like ISO27001, SOC2, NIS2, and DORA.
