Contact
Let's talk
Demo, advice or starting right away – write to us at hello@secvisory.com. We reply within one business day.
Demo
30 minutes well spent
We'll show you Secvisory with your own example – from upload to signed feed.
Live demo with your advisory
CRA assessment for your products
Plan recommendation without sales pressure
FAQ
Before you ask
What is CSAF and why do I need it?
The Common Security Advisory Framework (CSAF 2.0) is an OASIS standard for machine-readable security advisories. The German BSI recommends CSAF, and under the Cyber Resilience Act manufacturers must publish and share information about fixed vulnerabilities. CSAF makes this information automatically processable for customers.
What does “trusted provider” mean?
A CSAF trusted provider publishes advisories following strict rules: over TLS, with provider-metadata.json, signed with OpenPGP, with hash files and ROLIE feeds. Secvisory fulfils these requirements for your domain automatically.
Do I need my own servers or infrastructure?
No. Secvisory runs the complete distribution. You only connect your domain with a DNS record. For companies with special requirements there is an on-premises edition.
Can I migrate existing advisories?
Yes. Upload CSAF JSON files or entire ZIP archives – including all versions. Every document is checked against all CSAF tests on upload.