# The EU Cyber Resilience Act Is 87 Days Away — Here's a Free Compliance Toolkit for IoT Manufacturers (opens in new tab)

The EU Cyber Resilience Act (CRA) enforcement deadline is September 11, 2026. If you manufacture or import connected devices into the EU and haven't started your compliance engineering, the clock is loud. Penalties for non-compliance: up to EUR 15 million or 2.5% of annual global turnover — whichever is higher. I've been working on an open-source Python toolkit to help manufacturers meet the core technical requirements. Here's what the CRA actually demands, and how you can check your devices ...