The EU Cyber Resilience Act starts to apply on 11 September 2026. CVD Portal gives a manufacturer a free vulnerability disclosure portal, and paid plans cover Article 14 reporting, risk assessment, Annex I evidence and the Declaration of Conformity.