CRA operations for gateway manufacturers
Know what you placed on the market, release by release. Article 14 readiness for gateways already in the field, plus optional SDK distribution as blueprints.
The Pain
- No per-version SBOM for gateways already in the field
- Cannot prove what was in firmware v2.3.1 when a CVE drops
- Article 14 reporting duty with spreadsheet-based inventory
- SDK customers still struggle with setup, a separate support burden
What alloy-it Changes
- Product + release inventory with vendor and firmware-derived SBOMs
- Continuous monitoring and triage for shipped releases
- Article 14 awareness and SRP payload when actively exploited
- Optional: ship the SDK as a versioned Blueprint for customer onboarding
The Outcome
- Know what you placed on the market, release by release
- Ready for Sep 2026 authority reporting
- Evidence for market surveillance and buyer due diligence
- Fewer SDK setup tickets when you also distribute blueprints
Get your gateways CRA-ready
Start with a product inventory for what you shipped, or book a walkthrough.