CRALens is listed for sale at $15,000 USD.

What are CRALens's current metrics?

Monthly visitors: Under 1K/mo. Monthly revenue: Pre-revenue.

CRALens - Sell Project

Listed October 30, 2026

About CRALens

EU Cyber Resilience Act scope checker + Article 14 readiness pack generator

What it is CRAlens is a finished, narrow product for manufacturers of connected products and software that sell in the EU. Since 11 September 2026 they must report actively exploited vulnerabilities and severe incidents under Article 14 of the Cyber Resilience Act within 24 hours (early warning) and 72 hours (notification). Most small manufacturers have no process for it. What exists A free scope checker (role, product class, which obligations apply and when, e-mail capture with double opt-in) and a paid Article 14 Readiness Pack (€199): eight documents generated per product — reporting runbook with deadlines in local time and the right CSIRT, decision tree, six notification templates following ENISA’s reporting-platform glossary (PDF + DOCX), user notice, role matrix, evidence log, obligation calendar, pre-incident checklist. Every section cites the article it comes from; every regulatory statement was verified against the Regulation (OJ), the Commission’s 2026 guidance and the ENISA glossary (about 19,000 words of content). Engineering Next.js 15, React 19, TypeScript, Tailwind 4, Supabase (EU), Vercel, Resend, PostHog (EU), Lemon Squeezy (merchant of record), react-pdf. About 640 unit tests, 197 end-to-end tests, CI gates, post-deploy smoke test, automatic PDF layout checks, idempotent payment webhook with delivery recovery, EU-hosted data, no cookies or trackers. Documentation lets a new team resume without the founder. Included Code (GitHub), domain cralens.com, content, docs, brand, Vercel/Supabase/PostHog projects, 2–4 weeks of handover. Not included: revenue, legal review. Status Pre-revenue: the sale was kept closed until the company entity was finalised; the checkout integration is built and tested. Why I’m selling Solo part-time founder outside the EU; the product needs an operator already serving EU manufacturers. Best fit: a CRA/NIS2 advisory firm or a product-security vendor. The checker is a lead magnet; the pack is a productised entry point. Terms Asking US$15,000, asset sale, escrow via Escrow.com; open to offers from operators in the market. A 57-page sample pack and read access to the repository are available after a short call.

Project details

Website: https://cralens.com

Next step: <ol><li data-list="ordered">Open the store. The Lemon Squeezy checkout, signed delivery links, refund handling and delivery recovery are built and tested; the buyer connects its own merchant account and the €199 pack is on sale the same week.</li><li data-list="ordered">Use the free checker as the lead magnet it was designed to be: no sign-up wall, double opt-in e-mail capture, nurture sequence already written. Plug it into an existing advisory or SBOM customer base and every scope check becomes a qualified conversation.</li><li data-list="ordered">Sell through partners: the affiliate programme (30%, cookie-free attribution) and 5-pack consultancy bundles (€799) are built; the roadmap and partner FAQ describe the next steps.</li><li data-list="ordered">Extend the product along the roadmap already written: pack updates with login, Annex I essential-requirements checklist, technical-documentation skeleton, support-period planner, conformity-assessment routing — each a natural upsell to the same manufacturer, and the content method (every statement traced to a primary source) is documented so new blocks can be produced the same way.</li><li data-list="ordered">The window is time-bound and favourable: Article 14 reporting has applied since 11 September 2026 and full CRA application is 11 December 2027, so demand for exactly this material grows for the next 13 months.</li></ol><p><br></p>

For sale

Asking price: $15,000 USD

What's included

Domain name, Source code, All related design work, All related data

Also included: all content (about 19,000 words of pack content, 4 articles, 2 guides, legal drafts, methodology page); full documentation (architecture and decisions, design system for web and PDF, ops runbooks, status log, roadmap, review record); the Vercel, Supabase (EU) and PostHog (EU) projects, transferred to the buyer’s accounts; Google Search Console and Bing Webmaster properties; the affiliate programme (built, cookie-free); the Lemon Squeezy integration (buyer opens the store under its own entity). Handover: 2–4 weeks included, founder available for questions for 60 days after closing. “All related data” means the leads table only where a lawful basis for transfer exists; otherwise it is deleted before transfer, at the buyer’s choice. Transaction via Escrow.com; asset purchase agreement provided.

Reason for selling

I’m a solo, part-time founder based outside the EU, with no sales channel into European manufacturers. The product is finished and the content is the hard part, already done; what it needs now is an operator who already talks to manufacturers every week — a CRA/NIS2 advisory firm, a product-security or SBOM vendor, or a training provider. That operator will get far more out of it than I can, so I’d rather hand it over with a proper handover than let it sit.

Project metrics

Average Monthly Visitors: Under 1K/mo

Average Monthly Revenue: Pre-revenue

Average Monthly Downloads: Under 1K/mo