Security Updates for Product Lifetime (Art 13(8))

The Cyber Resilience Act requires that manufacturers supply security updates for the entire declared lifetime of a product, ensuring that identified vulnerabilities are remedied and the device remains protected against evolving threats. Article 13(8) sets the obligation to maintain these updates as a core element of product compliance.