CRAGuard Compliance Portal for the EU Cyber Resilience Act
Automate EU Cyber Resilience Act compliance. Generate SBOMs, deploy a Vulnerability Disclosure Program, and track threats securely.
Use with caution
CRAGuard Compliance Portal for… works, but test it on a staging site before relying on it in 2026. Was last updated 5 months ago, and scores 49/100 on our health check.
- Small user base (<10 active installs)
- Very few reviews so far
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where CRAGuard Compliance Portal… stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| cra compliance | #4 |
| cyber resilience act | #3 |
| sbom generator | #3 |
| vulnerability disclosure program | >100 |
| wordpress security | >100 |
About CRAGuard Compliance Portal for the EU C…
From the official readme · v1.1.0Description
CRAGuard automates EU Cyber Resilience Act compliance for WordPress. Generate SBOMs, deploy secure VDPs, and track 24h ENISA deadlines.
External Services
This plugin acts as a client connecting to a secure, external API gateway (hosted on Supabase) to process and store Vulnerability Disclosure Program (VDP) reports remotely. This prevents sensitive zero-day exploit data from being exposed in your local WordPress database.
- Service Used: Supabase (Backend-as-a-Service API)
- Data Sent: When a user submits a VDP bug report form, the plugin securely transmits the Site URL, Reporter Email, and Vulnerability Details to the external database via Edge Functions. The plugin also connects to this service to verify API license keys and retrieve active threat telemetry for the premium dashboard.
- Supabase Privacy Policy: https://supabase.com/privacy
- Supabase Terms of Service: https://supabase.com/terms
Features Engineered for CRA Compliance
CRAGuard provides the core architecture necessary to satisfy EU market regulations, protecting your clients and maintaining strict security telemetry logs.
Core Architecture (100% Free Edition):
- Vulnerability Disclosure Program (VDP): Instantly deploy a secure, encrypted front-end reporting portal using the
[craguard_vdp]shortcode to satisfy the CRA mandate for a public researcher point-of-contact. - 1-Click SBOM Generator: Programmatically maps your active WordPress environment (core, themes, plugins) and exports a legally compliant Software Bill of Materials (SBOM) in JSON format.
- 24/7 Background System Scanner: An automated cron engine scans your server architecture every 24 hours for high-risk vulnerabilities (outdated core software, missing SSL, open registration parameters) and issues immediate local alerts.
Premium Cloud API Infrastructure:
For agencies managing critical B2B infrastructure or high-volume client sites, the premium tier connects the plugin to our secure cloud environment:
* Encrypted Cloud Telemetry: Routes incoming bug reports securely to a centralized database via our API Gateway, preventing zero-day vulnerabilities from sitting in your local database.
* VDP Cloud Telemetry Dashboard: View and manage external security logs directly from your WordPress admin panel.
* 24-Hour ENISA Urgency Dashboard: Tracks active, unresolved security incidents with a live, visual countdown timer pulling from cloud telemetry, ensuring your development team never misses a mandatory reporting deadline.
Installation
- Upload the
craguard-compliance-portalfolder to your/wp-content/plugins/directory. - Activate the plugin through the ‘Plugins’ menu in your WordPress dashboard.
- Click on the new “CRA Compliance” terminal in your admin sidebar.
- Create a new public page (e.g.,
yourdomain.com/security) and paste the[craguard_vdp]shortcode to deploy your live reporting form.
Frequently asked questions
When does the EU Cyber Resilience Act take effect?
The mandate to establish a Vulnerability Disclosure Program and report actively exploited vulnerabilities to ENISA within 24 hours becomes strictly enforced on September 11, 2026.
Do I need this if my business is located outside the European Union?
Yes. If your WordPress site, plugin, eCommerce store, or digital product is available to consumers or businesses inside the EU, you fall under the jurisdiction of the Cyber Resilience Act and are subject to its regulatory fines.
How does the SBOM generator work?
The plugin runs a diagnostic scan on your active installation, structures the versioning data of your core files, themes, and plugins, and compiles it into a downloadable JSON file. This documentation is frequently required during mandatory EU security audits.
Changelog
1.1.0
- Unlocked Local SBOM Generator and Automated Background Scanner for all users (100% free).
- Shifted Premium architecture to exclusively manage Cloud API Telemetry and data segregation.
- Documented external API usage (Supabase) in readme.txt for Guideline 6 compliance.
- Enqueued JS/CSS natively, replacing inline HTML script/style tags.
1.0.1
- Hardened nonce sanitization protocols for strict WordPress repository compliance.
- Upgraded architecture from manual scanning to a 24-hour automated background cron scanner.
- Optimized dashboard UI and updated plugin slug for repository indexing standards.
1.0.0
- Initial Production Release.
- Deployed secure VDP shortcode routing and CRA compliance terminal.
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
FAQ
CRAGuard Compliance Portal for the…: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 12, 2026
Is CRAGuard Compliance Portal for… free?
Yes. CRAGuard Compliance Portal for… is free to download and use from the official WordPress.org plugin directory.
Is CRAGuard Compliance Portal for… safe to use in 2026?
CRAGuard Compliance Portal for… works, but test it on a staging site before relying on it in 2026. Was last updated 5 months ago, and scores 49/100 on our health check.
How many websites use CRAGuard Compliance Portal for…?
CRAGuard Compliance Portal for… is active on <10 WordPress websites and has been downloaded 264 times since it launched in May 2026. It was downloaded 83 times in the last 30 days.
Does CRAGuard Compliance Portal for… work with WordPress 7.1?
CRAGuard Compliance Portal for… is officially tested up to WordPress 7.0.7, while the latest release is 7.1.3. It may still work, but try it on a staging site first.
What PHP version does CRAGuard Compliance Portal for… need?
CRAGuard Compliance Portal for… requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was CRAGuard Compliance Portal for… last updated?
The latest version, 1.1.0, was released on May 26, 2026 (5 months ago).
Who makes CRAGuard Compliance Portal for…?
CRAGuard Compliance Portal for… is developed and maintained by ikhlaq001.
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
