Crosswalk is not available in your region: this connection appears to come from an excluded country. The United States and countries subject to comprehensive EU sanctions are excluded. Using a VPN or a privacy proxy? Then this notice can be wrong; the check runs in your browser and nothing is stored. You are welcome to read on - details.
The EU cyber laws, in a workspace you own
Crosswalk turns the CRA, NIS2, GDPR, the Machinery Regulation and RED into one guided assessment: verbatim law texts, gap analysis, evidence and audit-ready reports.
Nothing to install, no payment details. Claim Crosswalk Lite with your e-mail address and it costs €0 at launch: one project, all five laws, for good. It comes with a 14-day trial of a paid plan of your choosing. Without a key Crosswalk opens read-only. Paid plans from €99 per licence / month. See the plans →
- Nothing to pay to start
- No payment details
- Nothing to install
- No data collected by us
- Any modern browser
The CRA clock is running: reporting obligations from 11 Sep 2026, main obligations from 11 Dec 2027. Map yours now.
One live dashboard across every law in scope: coverage, open gaps, risks and products at a glance. Every screen, and what it does →
See the output before you start
Five documents from the example project that ships with Crosswalk, produced by the application itself for a fictional machine builder and its connected products. No sign-up, no e-mail address.
- Edge Controller EC-200 against the CRA Audit report per requirement, with the gaps and the evidence register. PDF, 42 pages.
- Technical documentation, CRA Annex VII The Annex VII file for the same product, in the annex's own order. PDF, 7 pages.
- The organisation against the CRA Processes, vulnerability handling and reporting, at company level. PDF, 30 pages.
- NIS2 dossier Art. 20, 21 and 23 mapped onto what the organisation actually does. PDF, 5 pages.
- Management review The one your budget holder reads: position, gaps, decisions to take. PDF, 5 pages.
Your data outlives the subscription
- Projects are plain files in a folder you choose. Open them, copy them, put them in your own backup. Crosswalk reads and writes that folder and nothing else.
- They stay readable and exportable if a subscription lapses. No hostage-taking: what you assessed remains yours, in a format you can take elsewhere.
- Full refund within 14 days if you do not agree at activation. The agreement is presented once more when you activate the key; decline it, leave it unactivated, and clause 9.2 gives the money back.
Local-first is verifiable, not a promise: open the network tab and work for ten minutes. Crosswalk does not upload your project data. AI is opt-in and off until you switch it on.
Your files never leave your device
Crosswalk is local-first: your evidence and project data stay with you.
From "which laws apply?" to an audit-ready file
Crosswalk walks a product or organisation through the same four steps for every law it covers, so the work is consistent and the trail is defensible.
Scope
Answer a short questionnaire; Crosswalk determines which laws and obligations apply to your product or organisation.
Assess
Each law's requirements are broken into workable controls with the verbatim text beside them. Record where you stand and what is missing.
Evidence
Attach evidence, assign owners and track tasks to closure. Essentials adds the evidence binder, the audit trail and version history.
Report
Export gap analyses, applicability statements and audit-ready reports for management, customers and auditors - watermark-free on a plan, and for the CRA on the Lite licence.
Five laws, one method
All five are included on every plan, the Lite licence too, each broken down into controls you can actually work through - not just a copy of the legal text.
Professional adds the full controls catalogue: 14 standards-based control sets, 850+ controls, mapped to the law clause by clause (IEC 62443, ISO/IEC 27001, ISO 22301, ETSI EN 303 645, EN 18031 and more). See the full catalogue →
Who uses Crosswalk
Manufacturers & importers
Software and connected-product makers placing goods on the EU market - map your obligations under the CRA, RED and the Machinery Regulation, and keep the evidence in one place.
Consultants & in-house teams
Run engagements or an internal programme with a clean folder per client or product, your own branding on client-facing reports (Advisor), and a repeatable method across laws.
See it on your own project - nothing to pay to start
The Lite licence (EUR 0 at launch) covers all five laws on one project, with clean CRA documents, and and it comes with a 14-day trial of a paid plan - no payment details. Upgrade when you need the other laws, the standards depth and clean, client-ready exports. Every paid plan includes all five laws; Professional adds the full controls catalogue.