Microservice Store today announced its EU CRA and UK PSTI Compliance Automation Framework, a device-to-cloud capability designed to operationalise key legislative obligations through its integrated Security Manager (iSM) and the Microservice Store Cloud platform. 

The framework is built to execute compliance workflows as a platform function, including evidence capture, SBoM handling, update governance, and regulatory reporting, rather than leaving them as manual, manufacturer-run processes.

Meeting EU CRA obligations with automated evidence and reporting

From 11th September 2026, the EU Cyber Resilience Act introduces mandatory, lifecycle-wide cybersecurity obligations for products with digital elements.

These include security-by-design, maintaining an SBoM, providing security updates, and notifying the authorities of actively exploited vulnerabilities and severe incidents, including an early warning within 24 hours submitted through the CRA Single Reporting Platform to the relevant CSIRT and ENISA.

Microservice Store’s approach is to automate these duties using microservice-level software identity on the device and orchestrated workflows in the cloud.

Click HERE to read more.