Release-bound evidence
Keep technical history attached to the exact release instead of reconstructing it months later.
CRA Operations
SuperSimple CRA Operations
A release-evidence workspace for software manufacturers. It connects a release, its SBOM, vulnerability observations, decisions and technical proof in one traceable record.
What is CRA Operations?
CRA Operations is a release-evidence platform for software manufacturers. It connects a release to its SBOM, vulnerability observations, decisions and technical proof so product, security and compliance teams can review one traceable record.
Not a CRM or scanner
The workspace supports engineering and security decisions; it is not a generic CRM, vulnerability scanner or legal conclusion.
Bounded pilot
The pilot starts with one product, one real release and two weeks of practical work.
Learn more
Read the product explanation, evidence model and pilot details on the dedicated product site.
Sources and regulatory context
CRA Operations does not provide legal advice. It helps teams keep technical evidence, decisions and release information manageable.
-
Regulation (EU) 2024/2847: Cyber Resilience Act
The official legal text on horizontal cybersecurity requirements for products with digital elements.
-
European Commission: CRA reporting obligations
Guidance on reporting actively exploited vulnerabilities and severe incidents.
-
ENISA: Technical Advisory for Software Bill of Materials
Technical guidance for SBOM adoption and software supply-chain transparency.