Kunnus is a SaaS platform for implementing the EU Cyber Resilience Act (CRA). It is built for manufacturers of products with digital elements: machinery and plant engineering, industrial components, embedded systems, IoT, energy and building technology, and software. Kunnus brings the CRA obligations together in one process: product inventory and classification, SBOM, vulnerability monitoring, risk assessment under Annex I, reports to ENISA and CSIRTs, CSAF advisories, technical documentation and the EU declaration of conformity. Reporting obligations for actively exploited vulnerabilities and severe incidents have applied since 11 September 2026, and the CRA becomes fully applicable on 11 December 2027. Manufacturers who cannot demonstrate CE conformity by then lose access to the ...