Article 14 reporting

We found something. Do we have to report it, by when, and to whom?

This tool gives preliminary deadlines from the awareness time you provide. Article 14 reporting obligations apply from 11 September 2026. If a deadline may be running, contact an expert immediately.

If the clock is already running, contact us now.

tyson@productcybersecurity.com

Is the product in CRA scope?

Check scope first →

What happened?

A vulnerability in our product is being actively exploitedA severe incident affects product securityA vulnerability with no known exploitationNot sure

When did you become aware?Where is your main establishment in the EU?

Preliminary guidance, not legal advice. TODO(owner): verify and link the current platform URL. Rules last reviewed 2026-10-19.