ENISA Single Reporting Platform: where CRA Article 14 notifications go

What the ENISA CRA Single Reporting Platform is, when it became operational, who uses it and how CyberAct24 supports preparation before official submission.

What is the CRA SRP?

The Single Reporting Platform is the official online platform developed, operated and maintained by ENISA for mandatory CRA notifications. ENISA states that it became operational on 11 September 2026, the same date Article 14 manufacturer reporting obligations became applicable.

Why a preparation layer still matters

The SRP is the official submission destination. Manufacturers still need an internal process to gather facts from product security, engineering, legal and management before an authorised person submits the notification.

What CyberAct24 does

CyberAct24 helps structure the case before submission: deadlines, product details, known incident or vulnerability facts, mitigation data, evidence and review status. It is not affiliated with ENISA and does not represent itself as the official reporting platform.

Frequently asked questions

Is CyberAct24 the ENISA Single Reporting Platform?

No. CyberAct24 is an independent commercial workflow service. ENISA operates the official CRA Single Reporting Platform.

When did the CRA SRP become operational?

ENISA states that the platform became operational on 11 September 2026.

Why not just type directly into the SRP?

Teams may still need to collect, validate and review information internally before official submission. CyberAct24 focuses on that preparation workflow.

Test your reporting workflow before an incident.

Use CyberAct24's free readiness tools or review the Founding 10 onboarding package.

Free readiness check Founding 10 — €490

Regulatory references: European Commission CRA reporting guidance and ENISA Single Reporting Platform. CyberAct24 is an independent commercial service and not a regulator or EU institution.