CONFIRMATE - Conformity Assessment, Metrics, and Automation for the CRA

The project at a glance

CONFIRMATE is an innovative project co-funded by the European Union (EU) and the European Cybersecurity Competence Centre and Network (ECCC), designed to help manufacturing SMEs stay ahead of evolving cybersecurity regulations. By streamlining compliance with the EU Cyber Resilience Act (CRA), CONFIRMATE delivers open-source tools, practical training, and standardized methods that make CRA compliance more accessible, efficient, and cost-effective.

The project’s name stands for Conformity Assessment, Metrics, and Automation for the Cyber Resilience Act. Built on the open-source Clouditor framework, CONFIRMATE provides automated service decomposition and compliance views, clear assessment results, a robust penetration testing methodology, multilingual cybersecurity training modules, and a comprehensive CRA compliance guide.

Compliance tool description

Confirmate is an open-source automation tool that streamlines CRA cybersecurity essential requirements conformity assessment by automatically evaluating compliance, determining individual needs for action, and comparing security settings with CRA specifications. Its intuitive dashboards and structured capabilities help organisations quickly identify the CRA essential cybersecurity requirements implemented and those to assess or to implement, saving valuable time in compliance checks while providing clear, actionable insights for continuous compliance and improvement.