Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Clearlane CRA is a Jira Cloud application designed specifically for manufacturers and product security teams to facilitate the management of vulnerability reporting in accordance with the Cyber Resilience Act. This innovative tool transforms Jira's vulnerability and incident work items into comprehensive records that meet the Article 14 deadlines, while also preparing the necessary ENISA reporting fields for users to review and copy. Additionally, it efficiently tracks affected products and their respective versions utilizing CycloneDX or SPDX software bills of materials. Teams can document fixes, notify users, generate CSAF 2.0 security advisories, and maintain PDF evidence alongside Jira work items, ensuring thorough documentation. The application is available in English, French, and German, and operates seamlessly on the Atlassian Forge platform. Notably, the app does not directly submit reports to ENISA; instead, it enables users to evaluate their reporting obligations and submit through the designated authority's platform, empowering teams to take charge of their compliance processes. This flexibility allows organizations to stay proactive in managing their cyber resilience efforts.

Description

Hoctave's CRA Manager is a cloud-based software solution aimed at assisting manufacturers and software developers in effectively implementing and managing compliance with the EU Cyber Resilience Act (CRA) on an ongoing basis. The platform seamlessly integrates the entire compliance process, linking Product, Version, SBOM/Components, Vulnerabilities, Risks, Actions, Evidence, and Regulatory Requirements. Users can efficiently oversee product portfolios, import CycloneDX and SPDX SBOMs, keep tabs on components and CVEs, evaluate risks, monitor remediation efforts, and uphold compliance documentation. Additionally, CRA Manager facilitates the creation of Annex VII technical documentation, manages CE marking processes, handles vulnerability and incident alerts, and supports comprehensive reporting and regulatory oversight. Tailored for manufacturers, IoT/OT providers, embedded software creators, and software publishers, the platform ensures continuous traceability between cybersecurity initiatives and the mandates set forth by the CRA, thereby enhancing overall compliance management. This not only streamlines operations but also helps organizations stay ahead of regulatory changes.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

No images available

Integrations

Atlassian Rovo Yes 
Dependabot Yes 
Jira Yes 
Snyk Yes 
Trivy Yes 

Integrations

Atlassian Rovo No 
Dependabot No 
Jira No 
Snyk No 
Trivy No 

Pricing Details

$10/month
Starts at $10/month for up to 10 users; larger teams are priced per user. Plans include a free trial.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Clearlane Apps

Founded

2026

Country

France

Website

clearlaneapps.com/cra/

Vendor Details

Company Name

Hoctave

Founded

2026

Country

France

Website

hoctave.com

Product Features

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management No 
Policy Management No 
Prioritization No 
Risk Management No 
Vulnerability Assessment No 
Web Scanning No 

Product Features

Alternatives

Alternatives

OSPulse Reviews

OSPulse

Fortitude Omnis Group Ltd
CodeSentry Reviews

CodeSentry

CodeSecure
Threat Detective Reviews

Threat Detective

Threat Detective Ltd
Threat Detective Reviews

Threat Detective

Threat Detective Ltd