Security updates under the CRA

Free and with advisories

Security updates are free of charge for users, unless otherwise agreed for tailor-made products, and come with advisory messages on the actions to take.

Separate and automatic

Where technically feasible, security updates are provided separately from functional updates. Where applicable, they are installed automatically by default, with a clear and easy way to opt out.

How long

At least for the support period, generally five years or longer. Each security update provided remains available for at least ten years or until the end of the support period, whichever is later.