Kunnus vs CVD Portal
CRA compliance platform that carries a product from classification to the EU Declaration of Conformity. How does Kunnus compare to CVD Portal for an EU manufacturer subject to the Cyber Resilience Act?
- Headquarters
- Germany
- Category
- CRA compliance management platform
- Pricing model
- Platform pricing not published. The open-source SBOM scanner is free.
How they compare on CRA-critical features
Eight rows comparing two CRA compliance platforms under Regulation (EU) 2024/2847. Both cover classification through the EU Declaration of Conformity.
Where Kunnus is strong
- +Classifies products as default, important Class I or II, or critical under the CRA.
- +Builds the Annex VII technical documentation and generates the EU Declaration of Conformity.
- +Describes reporting to the coordinating CSIRT and ENISA through the Single Reporting Platform on the 24 hour, 72 hour and 14 day clock.
- +Open-source SBOM scanner with CycloneDX output, and component matching against NVD and OSV.
- +Hosted only with European providers.
Where it is not a CRA fit
- !A whitelabel Article 13 intake portal with hosted RFC 9116 security.txt is not advertised (checked 2026-09-29).
- !CSAF 2.0 advisory output is not named in the published material (checked 2026-09-29).
- !Platform pricing is not published, so the cost is known only after a sales contact.
- !No free tier for the platform itself is advertised. The free offer is the SBOM scanner.
The CRA gap
Kunnus and CVD Portal both cover the conformity path from classification to the EU Declaration of Conformity. The difference is the Article 13 side. CVD Portal hosts the manufacturer's public single point of contact, security.txt and researcher triage on a free tier, so reports that start an Article 14 clock arrive in the same record that files them.
Why teams pick CVD Portal for CRA
Five differences that matter to an EU manufacturer choosing between the two.
- 1
Whitelabel Article 13 intake portal with hosted RFC 9116 security.txt on the Free tier.
- 2
Published pricing, from €0 per month for Article 13 to €299 per month for the full CRA workflow.
- 3
CSAF 2.0 and OpenVEX advisories generated from the remediation record.
- 4
Free public classifier at /classify that derives the Article 32 conformity route.
- 5
Article 14 submission packages drafted from the same product record as the intake.
Frequently asked
What is the difference between Kunnus and CVD Portal?
Do Kunnus and CVD Portal both support Article 14 reporting?
How do the SBOM approaches differ?
What does each platform cost?
Where is customer data stored?
Run Article 13 intake and the conformity file in one record
Start with the free Article 13 portal and security.txt, then add Article 14 reporting and the Annex VII file. The Article 13 baseline is €0/month.