CRA evidence readiness pilot
One defensible case. Four weeks. Fixed scope.
Connect a vulnerability to the active workload, exposure, accountable owner and business priority inside your environment.
- EUR 7,500
- fixed fee, excluding VAT
- 4 weeks
- one product and environment
- 1 business day
- operator install after readiness
- 35 days
- signed pilot license
The outcome
A reviewable evidence path, not another scanner queue.
- CVE
Severity, fixed version and immutable image identity.
- Workload
Active runtime, replicas, namespace and product.
- Exposure
Public route and observed reachability.
- Priority
Transparent score using business context.
- Evidence
Source, time, decision, owner and limitations.
Two-minute workflow
Watch one synthetic finding become a reviewable case.
Included
Enough scope to answer one real question.
During the pilot
- One production environment and up to 500 active workloads
- Agreed scanner, Kubernetes, exposure and ownership sources
- OIDC or local MFA, roles and named access
- Baseline, weekly working session and final readout
- Executive and technical evidence package
Measured before and after
- Median triage time
- Unknown active workloads
- Exposed findings without an owner
- Connector and coverage gaps
- Evidence-package preparation time
See the artifact
Review a synthetic evidence package before sharing access.
No real company, asset, address, vulnerability or user appears in the sample.
CyberMeasures prepares technical evidence and decision history. It does not provide legal advice, determine whether an event is CRA-reportable, conduct a penetration test or operate a managed SOC.
Start with the gap
Take one recent finding and map where the evidence lives today.
You keep the gap map even when the product is not a fit.
Book the review