EU Cyber Resilience Act Ready

CRA Compliance for Swiss Manufacturers

Over 60% of Swiss exports go to the EU. Without CRA compliance, your EU market access is at risk. Kunnus is the platform that manages, supports, and leads the auditing of all your products.

60%+
Swiss exports to EU
50+
CRA Controls Covered
70%
Cost Reduction
<18
Months Left

Swiss manufacturers are doubly affected

EU Cyber Resilience Act (CRA)

Any product with digital elements sold on the EU single market must be CRA-compliant by December 2027 — regardless of where the manufacturer is based. Swiss exporters are fully in scope.

Swiss Cybersecurity Audits (Motion 24.3810)

The Swiss Federal Council has been mandated to present its own cybersecurity regulation for digital products by autumn 2026 — closely aligned with the EU CRA.

More at National Cyber Security Centre NCSC

Act now, comply once

Companies that prepare for the EU CRA today will be well-positioned for the upcoming Swiss regulation. Kunnus will cover both with a single platform.

Challenges Swiss exporters face today

  • No centralized view of CRA readiness across your product portfolio
  • SBOM management via Excel — not scalable for EU conformity assessment
  • Manual vulnerability monitoring across CVE databases and advisories
  • Compliance evidence scattered across teams, tools, and emails
  • Unclear how Motion 24.3810 will differ from the EU CRA

Kunnus solves all of this — see it live in 15 minutes.

See Kunnus live — in 15 minutes

14-day free trial
EU-hosted
No credit card

What happens after you request a demo

1

We confirm

You'll receive a confirmation email within minutes.

2

We prepare

Our team reviews your products, export markets, and compliance needs.

3

15-min demo

A personalized walkthrough of Kunnus tailored to Swiss manufacturers.

What Kunnus does for you

Product Inventory

Manage your entire product portfolio. Classify products per CRA risk categories automatically.

SBOM Management

Import, analyze, and track Software Bills of Materials in CycloneDX and SPDX formats.

Vulnerability Tracking

Automated detection with SLA tracking and ENISA 24h notification support.

Audit-Ready Reports

One-click self-assessment reports. Export audit packages for EU conformity assessment bodies.

The clock is ticking — for both regulations

EUSep 2026

EU CRA reporting obligations start — 24h vulnerability reporting to ENISA

CHAutumn 2026

The Swiss Federal Council presents its own cybersecurity regulation for digital products

EUDec 2027

Full EU CRA compliance required — all products must meet requirements

CH2027+

Swiss cybersecurity law expected to take effect — compliance obligations begin

EU non-compliance: up to €15M or 2.5% of global annual turnover