Practical notes from our engineers: regulation explained for device makers, firmware and hardware decisions, and lessons from projects.
Since 11 September 2026, manufacturers of products with digital elements must report actively exploited vulnerabilities and severe incidents under the Cyber Resilience Act - also for products placed on the market earlier.
An SBOM is a machine-readable list of every software component in a release. For firmware it is only useful if the build produces it automatically and someone watches the components it lists.
A vulnerability process does not need to be heavy. It needs an owner, clear steps and a rehearsal before the first real report.
Describe your project and goal. An engineer replies within one business day.
We store your choice in your browser. With your consent we use analytics and marketing tools on bcf-software.com (Google Tag Manager, Google Analytics, Meta Pixel). Privacy & cookie policy
