Image
The Single Reporting Platform (SRP) is the online tool developed, operated and maintained by ENISA to enable manufacturers and, once applicable, open-source software stewards to meet their reporting obligations under the Cyber Resilience Act (CRA) for actively exploited vulnerabilities and severe incidents having an impact on the security of products with digital elements made available on the EU market.
From 11 September 2026, manufacturers are required to submit these mandatory notifications through the SRP. Designed to simplify EU reporting obligations, the SRP allows users to report once through a single platform and communicate the relevant information to the appropriate authorities.
The CRA and the SRP support a more coordinated EU approach to the reporting and handling of cybersecurity risks affecting products with digital elements. By enabling relevant national CSIRTs and other competent authorities to receive and act on reported information, the SRP supports more effective coordination and contributes to strengthening cybersecurity resilience across the EU.
Get Started
Access the CRA Single Reporting Platform: https://portal.cra-srp.enisa.europa.eu/
Resources
CRA Single Reporting Platform Factsheet
ENISA has published a Factsheet on the CRA Single Reporting Platform. It can be downloaded here, currently in English.
Terms and Conditions
Download the CRA - SRP Terms and Conditions
Frequently asked questions
Find answers to common questions about CRA reporting through the SRP, including reporting obligations and deadlines, registration and AR roles, notification workflows, CSRIT selection, verification, dissemination, and platform use.
CRA SRP Glossary
Consult the SRP Glossary for a detailed explanation of SRP data fields, completion instructions, examples, expected formats, timeline, and applicability.
User Support and Guidance
Manual
Download the CRA SRP – AR User Manual for guidance on using the platform.
Tutorial
Watch the CRA SRP – AR User Tutorial for a step-by-step guide to using the CRA Single Reporting Platform.
CRA SRP – AR User Tutorial Video
Guidance
ENISA has developed supporting guidance for Assigned Representatives (ARs) of manufacturers and, once applicable, open-source software stewards on how to register for and use the CRA SRP, complete and submit notifications, and perform the main platform workflows.
The information provided in these materials reflect ENISA's current best knowledge and may be subject to change. Please ensure that you consult the latest available guidance before applying these instructions. The guidance materials will be updated regularly and expanded as necessary to reflect platform developments and user needs.
This page provides information for Assigned Representatives (ARs) on how to register for the SRP. It is intended for AR users (Primary and Secondary). Updated: 10 September 2026
CRA SRP - AR User Registration
This page provides information for Assigned Representatives (AR) on how to submit, view and update notifications on the SRP. It is intended for AR users (Primary and Secondary). Updated: 9 September 2026
CRA SRP - AR Notification Submission and Update
This page explains the AR interface of the SRP and the various functions that can be performed. Updated: 9 September 2026
CRA SRP - AR Interface functions
This section explains to ARs how and when to apply one of the three cases of Particularly Exceptional Circumstances (PEC), as described in the third subparagraph of Article 16(2) of the CRA. Updated: 10 September 2026
CRA SRP Guidance - Particular Exceptional Circumstances (PEC)