Try CRA Workbench

Software for compliance evidence

Compliance evidence that stays current.

ZEKG builds focused tools that turn SBOMs, vulnerability data, vendor disclosures and regulatory requirements into evidence your experts can review, for testing labs, consultants, manufacturers and the privacy teams who vet their vendors.

Explore CRA Workbench Talk to us
product / sample-gateway v2.4.1 Illustrative
  • EU Cyber Resilience Act Evidence ready
  • EU RED · EN 18031 Draft for review
  • UK PSTI Evidence ready
  • AU smart-device standard Not started
KEV match · 1 component May trigger Article 14 — confirm
sbom.cdx.jsonCycloneDX 1.6parsed in browser
Regimes
EU CRA · EU RED / EN 18031 · UK PSTI · AU smart-device standard
SBOM formats
CycloneDX 1.4–1.6 · SPDX 2.2+
Vulnerability data
OSV · CISA KEV · FIRST EPSS

Products

One company. Focused products.

Each ZEKG product solves one compliance job well and runs on its own subdomain, so you adopt only what you need.

cra.zekg.com Early access

ZEKG CRA Workbench

A multi-client, white-label workbench for testing labs and product-security consultants. Prepare EU CRA technical documentation, Article 14 reporting packages and cross-regime mappings from one SBOM.

  • One dashboard for every client, product and version
  • EU CRA, EU RED / EN 18031, UK PSTI and the Australian smart-device standard
  • Delivered under your lab's brand
  • SBOM files are parsed in the browser and never uploaded
Open the demo
subprocessors.zekg.com Free

ZEKG Subprocessor Watch

A public directory of SaaS vendors' subprocessor lists with every change on record, read daily from the vendors' own pages. For privacy, security and procurement teams who track vendor subprocessors under GDPR Article 28.

  • Current list and change history for each vendor
  • Every entry traces to the vendor's page and the date it was observed
  • Atom feed per vendor; email alerts on a waitlist
Browse vendors
<next>.zekg.com In research

Next product

We validate demand before we build. New products follow the same principles and ship on their own subdomain.

Suggest a problem to solve

Principles

Built for the people who sign off.

  1. 01

    Evidence over claims

    Every regulatory statement traces to a primary source. Where we cannot cite one, we say so.

  2. 02

    Drafts, not verdicts

    We prepare material for qualified people to review. We never issue statements of conformity.

  3. 03

    Data minimization

    We process files in the browser where we can, collect only what a feature needs, and tell you before data leaves your device.

  4. 04

    Experts stay in charge

    Our tools take the repetitive work off labs and consultants. The professional judgment stays with them.

Security

We hold ourselves to the standard we help you meet.

Report a vulnerability
[email protected]
Disclosure policy
/.well-known/security.txt
In the browser
HTTPS only, with a strict Content Security Policy and no third-party trackers.

See the CRA Workbench in your browser.

No account needed. Try it with a sample SBOM or your own.

Open the demo [email protected]