Vigilon 
Testing service
RED Cybersecurity Testing
Assess radio products against the RED cybersecurity requirements in Article 3(3)(d), (e) and (f) using the EN 18031 harmonised standards, and build the test evidence your technical documentation needs.
Product cybersecurity compliance, from testing to ongoing reporting.
Vigilon helps manufacturers navigate the EU Radio Equipment Directive (RED) and Cyber Resilience Act (CRA) with independent testing, technical documentation and Vigilon Continuum.
Find your next compliance step
Answer a few questions about one product. You’ll see your result straight away — no contact details needed.
Since 11 September 2026 CRA reporting obligations apply to manufacturers of products in scope. Check your reporting readiness
-
Does RED cybersecurity apply to my product?
Answer a few questions about your radio product and how it connects.
Check RED scope -
Does the CRA apply to my product?
Check how your product, market and role affect the likely requirements.
Check CRA scope -
What should we do first for CRA?
Turn your current readiness into a prioritised action plan.
Build my CRA roadmap -
How should we handle CRA reporting?
Identify gaps in your vulnerability and incident reporting process.
Check reporting readiness
Already know what you need? Explore services or request a quote.
Why manufacturers work with Vigilon
- Product compliance specialists We focus on cybersecurity compliance for connected products entering the EU market.
- Both assessment routes Support for self-declaration and for preparing a Notified Body assessment.
- Standards-based work Assessments against EN 18031, ETSI EN 303 645 and established security testing methods.
- Actionable reporting Findings come with remediation guidance prioritised by risk.
Testing, documentation and ongoing reporting
Each offer stands on its own, and they work together: test evidence feeds your technical documentation, and your processes continue after launch.
Documentation service
CRA Readiness & Technical Documentation
Identify gaps against the Cyber Resilience Act, plan the work, and assemble the evidence and technical documentation — the technical dossier — the CRA requires.
Software
Vigilon Continuum
Vigilon’s reporting platform for ongoing product cybersecurity work. It supports automated report generation via continuous monitoring for notifications required to be submittted to the EU’s official Single Reporting Platform within 24-hours.
Start where you are
Most projects move through four stages. You can bring us in at any of them.
-
Scope
Confirm which requirements apply to each product, and what your role means.
Check RED or CRA scope -
Assess
Find the gaps through gap analysis, risk assessment and security testing.
Explore assessments -
Build evidence
Turn test results and design information into technical documentation.
About technical documentation -
Support ongoing obligations
Keep vulnerability handling, security updates and reporting running after launch.
Check reporting readiness
Other standards and security assessments
Broader product security work, on its own or alongside RED and CRA projects.
- ETSI EN 303 645 IoT security Assessment against the European baseline standard for consumer IoT devices.
- Penetration testing Testing of devices, web applications, APIs, mobile apps and cloud infrastructure.
- Risk assessment & threat modelling Structured, documented risk assessments for connected products.
- Vulnerability scanning Scheduled scanning of your external attack surface, networks and cloud environments.
Guides
Background reading on the requirements behind the checks.
Ready to scope a project?
Tell us about your product and what you need, and we’ll outline the work involved.