Complaro / OCCTET
European Open-Source CRA Verification Engine & On-Premises Compliance Core
The undisputed champion for open-source maintainers, privacy-sensitive defense labs, and budget-conscious engineering teams who refuse to send intellectual property to third-party clouds.
Open-source, self-hosted conformity assessment engine built by the European open-source cybersecurity community.
Statutory Capability & Article Coverage Matrix
How Complaro / OCCTET performs against non-negotiable statutory mandates of Regulation (EU) 2024/2847.
| CRA Legal Obligation | Statutory Reference | Tool Capability Status |
|---|---|---|
| Technical Documentation Dossier | Annex VII | Partial / Template Export |
| EU Declaration of Conformity | Annex V | Template Only |
| Coordinated Vulnerability Disclosure (CVD) | Article 10 & RFC 9116 | Workflow Only |
| 24-Hour ENISA Early Warning Dispatch | Article 14 (Active Sept 2026) | Runbook / Guidance |
| Substantial Modification Diff Engine | Article 22 | Manual Check |
| Binary Firmware Disassembly & SCA | Annex I Part I (1)(a) | Ingest Only |
| Air-Gapped / Island-Mode Deployment | Data Sovereignty & IP Protection | Native Air-Gapped / Island-Mode |
Architectural Fit & Deployment Analysis
Can be deployed as a local Docker container or integrated into internal GitLab runners. Analyzes local software repositories, validates SBOM formats, and checks open CVE lists locally.
Zero data leakage risk. For manufacturers working on classified systems, proprietary embedded microcode, or defense-adjacent PDE, Complaro ensures no telemetry ever leaves the premises.
Lacks enterprise support. If the European Commission updates harmonized standard schemas, community updates may take weeks to merge into the main branch.
Pricing, Packaging & Total Cost of Ownership (TCO)
- Internal DevOps engineering time for hosting, maintenance, and database updates
Open source maintainers who commercialize products remain fully liable under Article 10. Using an open-source tool does not transfer legal liability to the tool's authors.
This Site Uses No Cookies
Eigenia does not set cookies. The only thing stored in your browser is one preference, saved in local storage, noting that you have seen this notice.