enisa

Curated resources for the EU Cyber Resilience Act (Regulation 2024/2847): regulation, harmonised standards, EUCC, SBOM, vulnerability management, conformity assessment

Automated CVE alerting/reporting tool based on ENISA vulnerability database

ARCHIVED — moved to github.com/GenAI-Security-Project/crosswalk. This copy is frozen as of June 2026 and out of date.

Comprehensive and zero dependency Go library for the ENISA EU Vulnerability Database (EUVD) API. Instantly access real-time vulnerability data, security advisories, CVSS scores, and more.

An auditable dataset containing TLS requirements to assess a webserver's compliance with national cybersecurity agencies

Open NIS 2 supply-chain security questionnaire as a typed Zod schema, for any supplier. 50 fields in 4 sections, each anchored to NIS 2 Art. 21(2)(d) and (3), CIR 2024/2690, ENISA TIG, GDPR or the CRA, with ISO/IEC 27001:2022 controls. JSON and JSON Schema included.

Curated open index of EU cybersecurity and data protection compliance resources: NIS 2, GDPR, DORA, EU AI Act, Cyber Resilience Act and ePrivacy. Official regulations, ENISA and BSI IT-Grundschutz guidance, national authorities, open-source schemas and toolkits.

Data summarization of the European Cybersecurity Skills Framework (ECSF) from The European Union Agency for Cybersecurity (ENISA).

Go vulnerability data aggregator with EU CRA compliance - 28 providers including EU-specific feeds (KEV, EUVD, BSI CERT-Bund, CERT-FR)

CLI tool for BSI TR-03183-2 SBOM generation, enrichment, validation, and submission. CycloneDX 1.6 / SPDX 2.3 compliant. AGPL-3.0 licensed.

LaTeX class and template for the European Union Agency for Cybersecurity

24 hours starts the moment you know. The EU Cyber Resilience Act Article 14 reporting clock as a GitHub Action: SBOM, actively exploited vulnerability detection (CISA KEV), ENISA drafts.

Open-source CLI for preparing EU Cyber Resilience Act (Regulation 2024/2847) Article 14 notifications for the ENISA Single Reporting Platform.

SBOM and known-vulnerability monitoring for the EU Cyber Resilience Act: npm, Composer, Android, iOS. GitHub Action with an exploited-in-the-wild clock for Article 14 reporting.

Curated official sources, national authorities, standards & free tools for NIS2, the EU AI Act and the European Accessibility Act (EAA).

EU Cyber Resilience Act Article 14 reporting clock. Records the moment of awareness, computes the 24h and 72h deadlines and the 14-day final report deadline once a fix is available, drafts the ENISA/CSIRT notifications and exports CSAF 2.0. Offline, MIT. Applies from 11 September 2026.

🔌 Exposes EU CRA Article 14 actively-exploited-vulnerability reporter - ENISA + CSIRT payload. 11 Sept 2026 cliff. MIT. By MEOK AI Labs.

Free CRA Article 14 reporting kit: deadlines, ENISA platform fields, CVD policy template

Learning repository connecting EU AI Act and GDPR concepts with AI/security governance frameworks, mappings, case studies and implementation-oriented checklists.

Self-hostable incident reporting portal with ENISA RSIT classification and GDPR breach assessment