• Research
    • Will Your Chip Maker’s PSIRT Warn You About a Flaw? We Checked 40
    • Vulnerability Disclosure Programmes
    • Dependabot Has Nothing to Flag on 10 Exploited Flaws for Native Android and iOS Projects
    • Most of the 550 Connected-Device Apps We Checked Have No Published Way to Report a Security Flaw (That We Could Find)
    • Your Mobile SBOM Is Wrong in Three Specific Ways
    • Only 1 in 8 Small Publishers in Europe’s App Store Charts Publish a Security Contact
  • Laws & standards
    • Cyber Resilience Act
      • What Is security.txt, and Does the Cyber Resilience Act Require One?
      • How to Report a Security Vulnerability in a Smart Device
      • Vendor Security Requirements
      • CRA SBOM Requirements
      • Who Do You Tell About a Flaw in Your App’s SDKs? We Checked 43
      • CRA Reporting Obligations
      • Cyber Resilience Act Timeline
      • Does the Cyber Resilience Act Apply to Your App? Scope and Dates
      • The Cyber Resilience Act and UK Companies
      • CRA Compliance Checklist for Software and App Teams
      • All CRA articles (16)
    • EN 18031 / RED
      • Does EN 18031 Apply to Your Device? A Self-Check for Makers
      • Does EN 18031 Cover Your Companion App and Cloud? A Checklist
    • UK PSTI
      • UK PSTI Act: The Three Security Requirements, the Statement of Compliance, and How Many Device Makers Publish One
    • Product Liability Directive
      • Product Liability Directive: Can You Be Sued Over a Defective App?
  • Knowledge Library
    • Data products
      • The Engineering Data Products Directory
      • Mobile Engineering Data Tools
      • Cloud & SaaS Cost Intelligence
      • Technographics & Buying-Intent Data
      • Security Ratings & Vendor Risk Tools
      • AI / LLM Observability & Evaluation Tools
      • MCP Server Monitoring & Reliability Tools
      • Dependency Intelligence & Supply-Chain Tools
      • Your Post-Quantum Posture Is Your CDN’s Posture
      • A Quarter of Early MCP Servers Are Already Dead
      • What Real Stacks Actually Run Together (Data From Public Infrastructure Files)
      • 94% of the Top PyPI Packages Are Free-Threading Ready — Here Are the Blockers
      • All data products (12)
    • Data workflow guides
      • Is This Security Patch Safe to Apply? (a Data-Driven Workflow)
      • How to Vet a Dependency Before You Commit to It (a Data-Driven Workflow)
    • AI engineering
      • What is an AI Engineer? Roles, Responsibilities, and Day-to-Day
      • Evaluating and Optimizing AI Applications Built with Foundation Models
      • Implementing and Integrating Foundation Models in AI Applications
      • Designing AI Applications with Foundation Models
      • Understanding Foundation Models for AI Application Development
      • What is AI Engineering, as Defined by Chip Huyen, and Why Does it Matter?
      • Understanding Spec-Driven Development (SDD) for AI Agents
    • Vulnerability management
      • CISA KEV
  • Tools
    • Connected-Device Readiness Explorer
    • CRA Scope Checker
    • OWASP MASVS to CRA Annex I and EN 18031 Map
    • SDL Spec Author
  • Intelligence
    • Security Patch Impact
    • Dependency Adoption
    • Commercial Vendor Intelligence
    Sign in
    • Research
      • Will Your Chip Maker’s PSIRT Warn You About a Flaw? We Checked 40
      • Vulnerability Disclosure Programmes
      • Dependabot Has Nothing to Flag on 10 Exploited Flaws for Native Android and iOS Projects
      • Most of the 550 Connected-Device Apps We Checked Have No Published Way to Report a Security Flaw (That We Could Find)
      • Your Mobile SBOM Is Wrong in Three Specific Ways
      • Only 1 in 8 Small Publishers in Europe’s App Store Charts Publish a Security Contact
    • Laws & standards
      • Cyber Resilience Act
        • What Is security.txt, and Does the Cyber Resilience Act Require One?
        • How to Report a Security Vulnerability in a Smart Device
        • Vendor Security Requirements
        • CRA SBOM Requirements
        • Who Do You Tell About a Flaw in Your App’s SDKs? We Checked 43
        • CRA Reporting Obligations
        • Cyber Resilience Act Timeline
        • Does the Cyber Resilience Act Apply to Your App? Scope and Dates
        • The Cyber Resilience Act and UK Companies
        • CRA Compliance Checklist for Software and App Teams
        • All CRA articles (16)
      • EN 18031 / RED
        • Does EN 18031 Apply to Your Device? A Self-Check for Makers
        • Does EN 18031 Cover Your Companion App and Cloud? A Checklist
      • UK PSTI
        • UK PSTI Act: The Three Security Requirements, the Statement of Compliance, and How Many Device Makers Publish One
      • Product Liability Directive
        • Product Liability Directive: Can You Be Sued Over a Defective App?
    • Knowledge Library
      • Data products
        • The Engineering Data Products Directory
        • Mobile Engineering Data Tools
        • Cloud & SaaS Cost Intelligence
        • Technographics & Buying-Intent Data
        • Security Ratings & Vendor Risk Tools
        • AI / LLM Observability & Evaluation Tools
        • MCP Server Monitoring & Reliability Tools
        • Dependency Intelligence & Supply-Chain Tools
        • Your Post-Quantum Posture Is Your CDN’s Posture
        • A Quarter of Early MCP Servers Are Already Dead
        • What Real Stacks Actually Run Together (Data From Public Infrastructure Files)
        • 94% of the Top PyPI Packages Are Free-Threading Ready — Here Are the Blockers
        • All data products (12)
      • Data workflow guides
        • Is This Security Patch Safe to Apply? (a Data-Driven Workflow)
        • How to Vet a Dependency Before You Commit to It (a Data-Driven Workflow)
      • AI engineering
        • What is an AI Engineer? Roles, Responsibilities, and Day-to-Day
        • Evaluating and Optimizing AI Applications Built with Foundation Models
        • Implementing and Integrating Foundation Models in AI Applications
        • Designing AI Applications with Foundation Models
        • Understanding Foundation Models for AI Application Development
        • What is AI Engineering, as Defined by Chip Huyen, and Why Does it Matter?
        • Understanding Spec-Driven Development (SDD) for AI Agents
      • Vulnerability management
        • CISA KEV
    • Tools
      • Connected-Device Readiness Explorer
      • CRA Scope Checker
      • OWASP MASVS to CRA Annex I and EN 18031 Map
      • SDL Spec Author
    • Intelligence
      • Security Patch Impact
      • Dependency Adoption
      • Commercial Vendor Intelligence

    Category: Tools

    OWASP MASVS to CRA Annex I and EN 18031 Map

    Does your business make an app for people in the EU? Then a new EU law will usually cover it. The law is called the…

    securebydesignlabs
    SecureByDesignLabs October 26, 2026
    0 Comments

    Connected-Device Readiness Explorer

    Who publishes a route to report a security flaw, who states a support period, who protects their domain — searchable by country, category or brand.
    alexl271828
    Alex October 6, 2026
    0 Comments

    CRA Scope Checker for App Teams

    Five questions that tell you whether the EU Cyber Resilience Act applies to your product, and which obligations follow if it does.
    alexl271828
    Alex September 27, 2026
    0 Comments

    SDL Spec Author

    SDL Spec Author For hardening a plan you’ve already roughly formed for something epic-sized — not a cold-start form for every ticket. Turn that plan…

    securebydesignlabs
    SecureByDesignLabs August 29, 2026
    0 Comments
    © 2026 SecureByDesignLabs Ltd
    AboutVulnerability disclosureCompany details
    Loading Comments...