Audience
Product security teams, PSIRTs, and manufacturers of products with digital elements that must report vulnerabilities under the EU Cyber Resilience Act.
About Clearlane CRA
Clearlane CRA is a Jira Cloud app for manufacturers and product security teams managing Cyber Resilience Act vulnerability reporting. It turns Jira vulnerability and incident work items into records for Article 14 deadlines, prepares ENISA reporting fields for review and copying, and tracks affected products and versions using CycloneDX or SPDX software bills of materials. Teams can record fixes, inform users, create CSAF 2.0 security advisories, and keep PDF evidence with Jira work items. The app supports English, French and German and runs on Atlassian Forge. It does not submit reports to ENISA; users assess their obligations and submit through the authority's reporting platform.