Skip to content
ProductIn development

Codeward

Cyber Resilience Act workspace for small software and device makers. Checks SBOMs, finds components with exploited vulnerabilities and tracks every Article 14 reporting deadline.

Codeward showing an open assessment with the 24 hour and 72 hour Article 14 deadlines counting down

Highlights

  • 25 SBOM checks across CRA, CISA and BSI
  • Exploited vulnerability matching with OSV and CISA KEV
  • Article 14 clocks and ENISA report drafts
  • Annex VII and Annex I checklists

Codeward reads CycloneDX and SPDX SBOMs and checks them against the CRA, the 2026 CISA minimum elements and the BSI guideline. It matches components against OSV.dev and the CISA Known Exploited Vulnerabilities catalogue.

When a vulnerability is reportable it starts the 24 hour and 72 hour clocks and drafts ENISA reports that fit the platform's field limits. SBOMs stay in the browser; only package identifiers are sent for matching.

Pre-launch: register interest on the site.

Keep exploring

Related solutions.

All solutions
Geomend showing a demo plot file with issues grouped by rule and a Fix button beside each one
ProductIn development

Geomend

EUDR plot geolocation pre-flight. Checks plot files against every published TRACES rule, including the mistakes TRACES accepts and then reads wrongly, fixes what is safe to fix and exports clean GeoJSON.

Embertally cost dashboard comparing certificates on default values with verified supplier data
ProductIn development

Embertally

EU and UK CBAM cost and supplier data. Checks the templates suppliers send, costs every customs line on default values and on verified data, and shows which suppliers to chase first.

Gablekeep overview of a demo portfolio with overdue items, upcoming deadlines and register readiness
ProductIn development

Gablekeep

Compliance for self-managing landlords in England. Reads gas, electrical, EPC and deposit certificates, works out the legal deadlines and gets each property ready for the new landlord register.