Bridging the gap between code and compliance.https://www.webprivacyengineer.com/https://www.webprivacyengineer.com/blog/cra-audit/https://www.webprivacyengineer.com/blog/cra-audit/The CRA's vulnerability reporting duties have applied since 11 September 2026. I built cra-audit, an open-source CLI and GitHub Action, to turn the CRA and BSI TR-03183 into checks that run on every commit.Thu, 24 Sep 2026 00:00:00 GMThttps://www.webprivacyengineer.com/blog/web-privacy/https://www.webprivacyengineer.com/blog/web-privacy/After years building for the web at Sngular and a law degree, I started asking a different question: what does the law actually require from the code we ship? This is where I share what I find.Mon, 04 May 2026 00:00:00 GMT