ONEKEY

European product-cybersecurity platform automating SBOM generation, vulnerability management, and CRA compliance for connected-device makers.

CompanyCyber Resilience Act ComplianceCloud, Self-hosted

Pricing: Custom (contact sales)

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed June 2026 · How we review listings

What is ONEKEY?

ONEKEY operates the ONEKEY Product Cybersecurity & Compliance Platform, which performs automated firmware analysis, SBOM generation, vulnerability detection, and zero-day discovery. Its Compliance Wizard maps product evidence against the CRA and other frameworks, and its CRA Fast Start program structures readiness assessment, SBOM creation, vulnerability management, and continuous monitoring. ONEKEY (formerly IoT Inspector) is part of PwC Germany's investment portfolio.

Best for: Device manufacturers wanting automated SBOM, vulnerability management, and CRA evidence generation across the product lifecycle

Pros

Automated, platform-driven firmware/binary analysis rather than purely manual consulting
Purpose-built CRA Compliance Wizard covering multiple product-security regulations in one tool
Strong European product-security positioning, backed by PwC Germany investment
Continuous monitoring across the product lifecycle, not a one-time audit

Things to check

Software/platform-led: provides tooling and evidence, not formal conformity assessment or CE certification (not a notified body)
No public pricing
Technical product analysis focus; legal/organizational process consulting lighter than at full TIC firms

Reported in public reviews and vendor documentation. See sources below.

Key Features

CRA readiness assessment (CRA Fast Start)

Automated SBOM generation and validation (CycloneDX, SPDX)

Continuous vulnerability management and CVE prioritization

Automated impact assessment of CVEs in firmware context

Zero-day detection via static binary analysis

Compliance Wizard mapping to CRA, IEC 62443-4-2, ETSI EN 303 645, RED, UNECE R155

Open-source license and compliance detection

Export of compliance packages and statements of compliance

Do you work at ONEKEY? to confirm the details or send us a correction.

Add the Cyber Vendor Guide badge to your site

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Spot an error, or do you represent ONEKEY? Request a correction.

Key facts

Pricing: Custom (contact sales)
Model: Platform subscription + advisory
Founded: 2020
Cloud: Yes
Self-hosted: Yes

Visit website

ONEKEY Alternatives

FeaturedPCA Cervus
Device-by-device vulnerability monitoring for embedded produ...

Learn more

pi3gGerman embedded-Linux and IoT specialist helping SME manufac...
TUV SUDGlobal testing and certification body offering CRA readiness...
SGSWorld-leading testing and certification company that, throug...
Bureau VeritasGlobal TIC group whose cybersecurity unit delivers end-to-en...
DEKRAMajor TIC organization offering CRA readiness, security eval...