As our reliance on connected devices and software deepens, the need for robust, transparent, and consistent cybersecurity practices is increasingly critical. The European Union's Cyber Resilience Act (CRA) represents a landmark legislative moment, with the act’s purpose to be “ensuring that hardware and software products are placed on the market with fewer vulnerabilities and that manufacturers take security seriously throughout a product's lifecycle”. This welcomed initiative aims to protect consumers and businesses with products that are secure by design and manufacturers who are trans