Try CRA Workbench

Software for product-security compliance

Compliance evidence that stays current.

ZEKG builds focused tools that turn SBOMs, vulnerability data and regulatory requirements into evidence your experts can review, for testing labs, consultants and the manufacturers they serve.

Explore CRA Workbench Talk to us
product / sample-gateway v2.4.1 Illustrative
  • EU Cyber Resilience Act Evidence ready
  • EU RED · EN 18031 Draft for review
  • UK PSTI Evidence ready
  • AU smart-device standard Not started
KEV match · 1 component May trigger Article 14 — confirm
sbom.cdx.jsonCycloneDX 1.6parsed in browser
Regimes
EU CRA · EU RED / EN 18031 · UK PSTI · AU smart-device standard
SBOM formats
CycloneDX 1.4–1.6 · SPDX 2.2+
Vulnerability data
OSV · CISA KEV · FIRST EPSS

Products

One company. Focused products.

Each ZEKG product solves one compliance job well and runs on its own subdomain, so you adopt only what you need.

cra.zekg.com Early access

ZEKG CRA Workbench

A multi-client, white-label workbench for testing labs and product-security consultants. Prepare EU CRA technical documentation, Article 14 reporting packages and cross-regime mappings from one SBOM.

  • One dashboard for every client, product and version
  • EU CRA, EU RED / EN 18031, UK PSTI and the Australian smart-device standard
  • Delivered under your lab's brand
  • SBOM files are parsed in the browser and never uploaded
Open the demo
<next>.zekg.com In research

Next product

We validate demand before we build. New products follow the same principles and ship on their own subdomain.

Suggest a problem to solve

Principles

Built for the people who sign off.

  1. 01

    Evidence over claims

    Every regulatory statement traces to a primary source. Where we cannot cite one, we say so.

  2. 02

    Drafts, not verdicts

    We prepare material for qualified people to review. We never issue statements of conformity.

  3. 03

    Data minimization

    We process files in the browser where we can, collect only what a feature needs, and tell you before data leaves your device.

  4. 04

    Experts stay in charge

    Our tools take the repetitive work off labs and consultants. The professional judgment stays with them.

Security

We hold ourselves to the standard we help you meet.

Report a vulnerability
security@zekg.com
Disclosure policy
/.well-known/security.txt
In the browser
HTTPS only, with a strict Content Security Policy and no third-party trackers.

See the CRA Workbench in your browser.

No account needed. Try it with a sample SBOM or your own.

Open the demo hello@zekg.com