Free courses and certificates
CVD Portal Academy
Free, self-paced courses on the EU Cyber Resilience Act. Study the modules, then pass the final exam to earn a certificate of completion that anyone can verify.
- Training Tracks
- 2
- Total Modules
- 21
- CPE Credits
- 8 Total
- Tuition
- 100% Free
Available Training Programs
Pick the course for your role. Each course includes free study modules, a final exam, and a certificate of completion that anyone can verify.
EU Cyber Resilience Act for Manufacturers
Target audience: Manufacturers, Product Security Leads, Compliance Officers
A complete curriculum on what Regulation (EU) 2024/2847 requires of anyone placing a product with digital elements on the EU market. Covers product classification, Annex I essential requirements, Article 14 incident reporting, technical documentation, and conformity assessment.
Topics covered:
- ✓Scope & Classification (Art. 2–8)
- ✓Annex I Essential Requirements
- ✓Vulnerability Handling & Policy
- ✓Article 14 24h/72h/14d Reporting
- ✓Annex V EU Declaration of Conformity
- ✓Conformity Assessment Modules
CVD Portal Partner Academy
Target audience: Security Consultancies, Advisory Firms, Resellers, MSPs
A fast-paced curriculum for consultants, advisors, and service partners who deliver CRA compliance workflows on CVD Portal. Covers partner console operations, client advisory engagements, and CRA sales enablement.
Topics covered:
- ✓Partner Console Administration
- ✓Multi-tenant Client Management
- ✓CRA Advisory Delivery
- ✓Vulnerability Intake & Triage
- ✓Commercial Models & Billing
- ✓Co-marketing & Certification
Practise Article 14 with a free tabletop exercise
Run a 90-minute exercise on an actively exploited vulnerability. Eight timed injects take your team from the first report to the final report to ENISA and the coordinator CSIRT. The page then builds an after-action report. No account is needed.
Start the tabletop exercise →How the certificates work
A certificate records that you completed a course and passed its exam. It is not a product certification under the CRA.
Primary sources
Each manufacturer course module lists the official sources it draws on, with links to the full text on EUR-Lex and to European Commission pages.
Graded exams
Each exam draws questions at random from the course question bank. The exam grades your answers. You do not grade yourself.
Verifiable Digital Credentials
Certificates are issued with cryptographic signatures conforming to Open Badges 3.0 and W3C Verifiable Credentials standards.
CPE Credits & LinkedIn Recognition
Certificates carry self-reported CPE credit allocations and support 1-click addition to your professional LinkedIn profile.
CRA Compliance Toolset
Complement your training with our free interactive assessments, scanners, and policy starters.
CRA Product Classifier →
Determine whether your product is Default, Class I, Class II, or Critical under CRA Annex III and IV.
Cyber Resilience Act Checklist →
Audit your organization against the 21 mandatory requirements of CRA Annex I Part I and Part II.
CRA Exposure Scanner →
Scan your domain for RFC 9116 security.txt files and coordinated disclosure policy readiness.
CRA Policy Templates →
Free, customizable vulnerability disclosure policies and technical file starters for EU manufacturers.
Article-by-Article Guide →
Read our comprehensive plain-language commentary on every article of Regulation (EU) 2024/2847.
CRA Maturity Assessment →
Evaluate your product security operations against industry standards and CRA conformity requirements.