CSA STAR Registry

Porta Regulus develops cybersecurity assurance and regulatory compliance software platforms for European hardware and software manufacturers.

Its core SaaS product, CVD Portal, delivers an automated conformity workspace for the EU Cyber Resilience Act (CRA, Regulation (EU) 2024/2847), governing all products with digital elements placed on the European market.

The platform provides comprehensive compliance management across the full product lifecycle: product classification, cybersecurity risk assessment, Annex I essential security requirements verification, Annex VII technical documentation generation, and EU Declaration of Conformity creation for CE marking.

For coordinated vulnerability disclosure (CVD) and statutory reporting, the platform delivers RFC 9116 security.txt hosting, whitelabel researcher submission portals, 48-hour acknowledgment tracking, and automated CRA Article 14 notification filing packages (24-hour early warning, 72-hour notification, and 14-day final reports) aligned with national CSIRTs and the ENISA Single Reporting Platform (SRP). Built-in tooling includes CycloneDX and SPDX Software Bill of Materials (SBOM) ingestion, CVSS v3.1/v4.0 scoring, and CSAF 2.0 machine-readable security advisories.