What you need at a minimum
If you are a manufacturer under the CRA: this selection covers the resulting obligations in Complass. It is preselected when you start a trial or order.
Portal size Start
- Cyber Resilience Act (CRA): Essential requirements, conformity assessment and CE marking. (Art. 13 CRA (opens in a new tab))
- Vulnerabilities and attack techniques (incl. SBOM, CRA product file, MITRE ATT&CK): Handle vulnerabilities and send an early warning on actively exploited vulnerabilities within 24 hours. (Art. 14, Annex I Part II CRA (opens in a new tab))
- Incident management: included
- GDPR, AI Act and Whistleblower protection (HinSchG) (baseline protection): included
| Item | Net price per month |
|---|---|
| Start S | €179 |
| Cyber Resilience Act (CRA) | included |
| Vulnerabilities and attack techniques (incl. SBOM, CRA product file, MITRE ATT&CK) | €149 |
| GDPR, AI Act and Whistleblower protection (HinSchG) (baseline protection) | included |
| Total | €328 net/month |
With annual payment, 12 months minimum term. Monthly payment with a 15 % surcharge. All prices net plus VAT, as of 16 October 2026.
Adjust the selection in the price overview: minimum selection manufacturer
If you are only an importer or distributor (Art. 19, 20 CRA), the CRA framework without the vulnerability module is enough in Complass: Start, €179 net/month. Anyone who sells products under their own name or substantially modifies them counts as a manufacturer (Art. 21, 22 CRA). View selection: minimum selection importer or distributor