Checks SECURITY.md against the EU Cyber Resilience Act clocks that went live 11 Sep 2026: 24h early warning, 72h notification, 14-day final report, 5-year support period, CVD policy, SBOM. Runs entirely in your browser — nothing is uploaded.
Free here: Lints the SECURITY.md you have open and names every CRA Article 13/14 and Annex I/II clause it is missing, with the statutory deadline and the article number for each one.. In the editor: Scans every SECURITY.md in the whole workspace at once and writes the corrected, CRA-clause-referenced policy text out to disk as a dated audit file you keep. — that part asks for a licence key.
Same engine as the VS Code extension, byte for byte.