99% more reported CVEs per day in 2026 than last year.
CRACI

Securing your supply chain shouldn't cost more than a breach.

Pay only for the build minutes you use. No monthly fee.

Enterprise

Custom

For large organizations with specific needs

  • 20+ users
  • Annual contract
  • EU data residency
  • Custom data retention
  • SAML & SSO
  • ISO 27001
  • Priority support
  • Influence the product roadmap
Talk to sales

Build your plan

Tell us about your usage and we'll estimate your monthly cost.

1k10k50k100k500k1M

Frequently Asked Questions

Everything you need to know about our product and services

Who is CRACI built for?

Any company that builds or ships software — from startups and SaaS providers to enterprises, agencies, and hardware makers with embedded code.

If your team develops products with digital elements for the EU market, CRACI helps you stay compliant with the Cyber Resilience Act without slowing down development.

What is an SBOM?

An SBOM (Software Bill of Materials) is a complete inventory of every component your software is built from. CRACI generates a provably complete SBOM — including all transitive dependencies — directly from the CI runner, so you know the version you ship is the actual version described by the SBOM. CRACI supports SPDX, CycloneDX, and other industry-standard formats.

Is there a monthly fee or a charge per SBOM?

No. You pay only for build minutes. There is no monthly fee and no charge per SBOM: every build gets its SBOM, and CRACI keeps re-checking the SBOMs of what you ship against new vulnerabilities.

How does CRACI fit into my CI/CD?

CRACI provides its own build runner, because the SBOM is recorded inside the runner that does the build, so it cannot run on third-party runners. On GitHub Actions, CRACI is the runner and your runs still show up in the GitHub UI. GitHub Actions is supported today; other CI systems are on the roadmap.

What formats can compliance reports be exported in?

Compliance reports can be exported as PDF, HTML, CSV, Excel, or JSON.

How much do build minutes cost?

Build minutes are billed at €0.002 per vCPU-minute. A 2-vCPU Linux x86 runner costs €0.004 per minute (about $0.0046 at €1 = $1.16), against $0.006 per minute for GitHub's standard 2-core Linux runner. CRACI meters per second while GitHub rounds each job up to a whole minute, so pipelines with many short jobs save the most. See the full comparison with GitHub-hosted runners, or what free CI minutes leave out.

What does Enterprise pricing look like?

Enterprise plans are custom — reach out to talk to sales directly.

Startup program

Eligible startups get a minimum of 100k free build minutes and hands on onboarding from our team.

Apply now