Image
The Single Reporting Platform (SRP) shall become a technical tool for the reporting of actively exploited vulnerabilities and incidents impacting products with digital elements in the EU Digital Single Market.
Under the Cyber Resilience Act (CRA), manufacturers of products with digital elements are mandated to report actively exploited vulnerabilities and severe incidents having an impact on the security of the products.
As of 11 September 2026 onwards, the SRP will be used by CSIRTs and manufacturers for mandatory reporting and could be used by any natural/legal persons for voluntary reporting.
Throughout 2025 and 2026, ENISA is taking the necessary steps to support the successful implementation of the platform.
Overall, the CRA brings transparency to the vulnerability disclosure processes and strengthens how EU CSIRTs can mitigate risks stemming from vulnerabilities.
Get Started
Resources
CRA Single Reporting Platform Factsheet
ENISA has published a factsheet on the CRA Single Reporting Platform. It can be downloaded here, currently in English.
Frequently asked questions
Find answers to common questions purpose of the SRP, reporting obligations, processes, timelines, users, and technical operation
User guidance
The Agency has developed guidance documents, containing instructions on the use of the CRA SRP by the Assigned Representatives of manufacturers of products with digital elements, and opensource software stewards. The information contained here is provided according to our current best knowledge and may be subject to change. Please ensure you consult the latest available guidance before applying these instructions. They will be updated regularly and expanded according to the needs.
This page provides information on the Assigned Representatives (AR) user registration in the SRP. It is intended for AR users (Primary and Secondary). Updated: 31/07/2026
CRA SRP - AR User registration
This page provides information on the Assigned Representatives (AR) submission and update of notifications in the SRP. It is intended for AR users (Primary and Secondary). Updated: 31/07/2026
CRA SRP - AR Notification submission and update
Need Help?
For support, please contact: cra-srp-helpdesk[@]enisa.europa.eu