We are opening invite-only Public Preview access to EmbedForge, our cloud-native build orchestration platform for embedded Linux. From day one, every build produces the technical evidence required by the EU Cyber Resilience Act.
What EmbedForge does
EmbedForge unifies Yocto Project and Buildroot under a single platform: declarative templates, elastic Kubernetes-based build infrastructure, an OpenEmbedded layer catalogue, container deployment at build time, and security scanning across multiple CVE databases. No build servers to maintain.
What is different from a generic CI is the integration. CRA management tools are not bolted on top of the pipeline, they live inside builds and templates.
CRA, built into every build
The first reporting phase of the EU Cyber Resilience Act begins on 11 June 2026, with full application by December 2027. EmbedForge produces the evidence side of CRA compliance automatically:
- SBOM in SPDX 2.3 and CycloneDX 1.4
- VEX documents in CycloneDX 1.5
- Pre-filled Declaration of Conformity draft (Annex V)
- Build provenance manifest, tamper-evident
- Security delta against the previous release (Art. 13(3))
- One-click Annex VII bundle ready for your auditor
Plus an SLA-tracked Article 14 pipeline that pre-fills the 24h, 72h, and 14d notification templates and surfaces them next to the build that triggered them.
Who Public Preview is for
Public Preview is invite-only and aimed at consultancies, BSP and silicon vendors, OTA and middleware providers, and product teams running Yocto or Buildroot in production. We are looking for partners who want to ship CRA-ready embedded Linux without bolting compliance on top of their CI.
Public Preview is invite-only. Each request is reviewed by our team to ensure a productive onboarding experience.
Request early access
Visit embedforge.io and submit your request through the signup form. Tell us about your build system today (Yocto, Buildroot, or moving beyond a generic distribution), your target hardware, and the compliance frameworks you need to address.
We are reviewing requests on a rolling basis and will reach out with onboarding details as we accept new organizations.
EmbedForge is built and operated by TechnoSec. For partnership inquiries beyond Public Preview access, contact us.