Skip to content
PinakashieldTech
Free health checkHealth check

For charger makers

CRA reporting has applied to manufacturers since 11 September 2026. When a vulnerability is actively exploited, you have 24 hours to send an early warning.

Talk to us about CRA reportingSee what exists today
Close-up of a fast charger with connectors docked in lit ports

What’s being asked of you

Reporting already applies

Actively exploited vulnerabilities and severe incidents go through ENISA’s single reporting platform.

European Commission, CRA reporting · The CRA for charger makers

Which units are affected?

When an advisory arrives, the first question is which firmware, in which units, at which customers.

The main obligations are next

Essential requirements and CE marking follow on 11 December 2027, including vulnerability handling across a support period.

What we’re building for you

Each item carries its status today. The first GridSEAL release is targeted for about Q2 2027.

  1. From advisory to affected units

    Query by component and firmware version, then follow a fix through to verified install.

    Roadmap

  2. A 24-hour and 72-hour reporting clock

    One record of who knew what and when, kept beside the evidence.

    Roadmap

  3. CSAF and VEX drafts

    Machine-readable advisories for a person to review before publishing.

    Roadmap

  4. Attack simulation in a sandbox

    PST-ThreatClone runs test attacks in a lab, so your team can check detection and response without touching live charging.

    Research prototype

Where this sits in the charging chain

Vehicle to charger

In a study of 325 DC chargers, 12% supported TLS on this link.

ISO 15118-20 applies to new or renovated points from 1 January 2027.

The charger

It’s a networked computer on a public site, and its firmware is an update path.

The Cyber Resilience Act binds charger makers.

Charging back-end

GridSEAL starts here

CISA issued at least 15 advisories on these platforms from January to October 2026.

NIS2 binds operators, including their supplier risk.

The grid

Vehicle-to-grid adds commands that move real power, so each one needs limits.

GridSEAL Grid is on our roadmap.

Read next

Talk to us about CRA reporting

We’re looking for charger makers to shape this work. Tell us how your vulnerability handling runs today.

Talk to us about CRA reporting