CYBER RESILIENCE ACT: THE LIABILITY IS NOW ON YOU
Significantly Reduce Your CRA-Related Efforts and Risks
The EU Cyber Resilience Act (CRA) makes manufacturers liable for their products throughout the lifecycle, including used 3rd party components.
We can help you assess your readiness.
Request Your CRA Readiness Check.
It's non binding and free of charge
Do You Need All Your Dependencies?
The CRA makes you liable for all of your technology stack, including all your 3rd party components and the dependencies that come with them.
The more components you have from different vendors, the more dependencies you add to for you to manage and take the responsibility of. With fast-paced software creation, further boosted with agentic development, the number of dependencies grows incredibly fast. Especially with long product lifecycles, it builds up to what can be a very expensive and risky entity to maintain.
Do you know what you have in your stack?
Can you really manage it all, throughout the years?
Or Could You Consolidate?
For you as a product manufacturer, reaching and remaining CRA compliant becomes significantly easier with a certified framework from an experienced partner.
Qt provides a single framework and integrated tooling to cover your needs from UI technology to core functionality, including internet protocols, networking, and connectivity. For all this, you get ready-made building blocks, topped with SBOMs, vulnerability management, threat and risk analysis, and technical documentation for Qt's part of your product.
A stable entity with a wealth of components
Commitment also for Qt's 3rd-party components
EASE THE BURDEN
Security Maintenance Becomes a Significant Workload over the Years
The commercial Qt LTS releases allow you to keep your product in production in a stable and maintained environment.
-
Overlapping 5-year-cycles allow updating in an organized manner.
-
You get all the maintenance and security patches immediately at their release.
-
You get first-hand information on the Early Warning List.
-
You can expand and extend the 5-year support with additional services.
The commercial licensing makes maintenance significantly easier.
The open source alternative leaves you with a significant maintenance burden to handle manually; either you update to every minor release every ~6 months, or you manually apply every single update and patch which you will only have access to with a delay. That will be a major workload and put you at serious risk of vulnerabilities in your product, which, in turn, puts you at a risk of CRA incompliance fines.
WHAT IF YOU'RE NOT READY TO UPGRADE IMMEDIATELY?
A Temporary Option: Critical Security Patches for Legacy Releases
If you can’t upgrade from an older Qt Framework release after its end-of-support, you can extend your ability to maintain your product with the Extended Security Maintenance (ESM) subscription.
The ESM is a temporary solution that helps with compliance in a legacy Qt release while you’re updating to the newest LTS. ESM gets you access to security patches and you can combine it extended support for further assistance.