Guided diagnostic
The diagnostic is free and takes twenty minutes on your own. If the regulation's vocabulary slows you down, we run it together in one session — and you leave with an action plan ordered by deadline.
Who it is for
Teams discovering the Cyber Resilience Act who want to avoid getting the first step wrong: product classification and economic role determine everything that follows. It is also the fastest format for an SME with no designated cybersecurity lead.
How it runs
1 Before the session
You tell us which product you want to cover. Nothing to prepare: if you already have a list of software components, all the better; if not, we manage without.
2 The questionnaire, together
We go through the diagnostic questions over video. Every regulatory term is translated as we go, and “I don't know” answers are recorded as such rather than guessed.
3 The report debrief
We read the report together: classification, role-based obligations, score per axis, gap register. We separate what belongs to September 2026 from what belongs to December 2027.
4 The action plan
You leave with the full report and a list of work items ordered by deadline and effort — what can be handled in-house, what needs a supplier, what can wait.
What you leave with
- The full report for the product covered, without the free version's limit.
- An action plan prioritised by regulatory deadline and by effort.
- The “to check” points isolated, with who to ask about each.
- Access to the tool to run the diagnostic yourself on your other products.
What it is not
- It is not legal advice. The tool cites the regulation and the session helps you answer and prioritise; the final classification of your product remains yours, and deserves qualified counsel if the stakes are high.
- It is not a time-and-materials consulting engagement. The format is fixed and so is the price — we do not sell long-form support, and we do not replace a law or consulting firm.
- It is neither a guarantee of compliance nor a guarantee of classification. FirmVox prepares and documents; it certifies nothing and submits nothing on your behalf.
The fee
€390
for the 90-minute session
Deducted from your first monitoring subscription if you subscribe straight after.
Frequently asked questions
Do we need to prepare anything?
No. If you already have a software bill of materials for your product, bring it: it speeds up the inventory axis. Otherwise the session runs regardless, and the missing inventory simply becomes the first item on the action plan.
Who should attend?
Someone who knows the product technically and, ideally, someone who can decide. Ninety minutes is enough for two people; beyond four participants, discussions stretch.
What if my product turns out not to be covered by the CRA?
That is a useful result in itself: you leave with the out-of-scope reasoning written down and documented, which is exactly what a customer or auditor will ask for. The session simply is not worth repeating for a second product of the same kind.
Prefer to try on your own first? The free diagnostic is right here.
Take the free diagnostic