Shipmark / Free tools

CRA reporting deadline calculator

Article 14 deadlines for exploited vulnerabilities and severe incidents, in your time zone, with a calendar file.

Since 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe incidents through ENISA's Single Reporting Platform. Enter when you became aware and get every deadline.

What happened?
When did you become aware?

The moment an initial assessment showed, with reasonable certainty, that it is being exploited or that the incident happened. Time zone: your time zone.

The calculator runs in your browser and stores nothing. It is a planning aid based on Article 14 of Regulation (EU) 2024/2847, not legal advice. Read CRA vulnerability reporting for app teams for what each report must contain.