Winbond Launches Kit for EU Cyber Resilience Act
Winbond's new CRA Conformance and Integration Kit targets manufacturers preparing connected products for the EU Cyber Resilience Act.
Updated on Nov. 6, 2026 in Semiconductors
Winbond Electronics Corporation announced the CRA Conformance and Integration Kit for its TrustME W77Q Secure Flash family. The kit bundles hardware security, software, integration guidance, testing resources, and reference designs to help manufacturers accelerate readiness for the EU Cyber Resilience Act.
Why it matters
The EU Cyber Resilience Act requires connected products sold in the European Union to meet cybersecurity obligations, and many manufacturers must prepare their hardware and firmware accordingly. The kit is positioned as a way to shorten that preparation by packaging security evidence and integration tools together.
The W77Q family has achieved SESIP Level 2 certification and uses the Leighton-Micali Signature scheme specified in NIST SP 800-208 to authenticate firmware and software updates. Component certification alone does not establish CRA conformity of a finished product.
The players
Winbond Electronics Corporation
Winbond is a Taiwan-based semiconductor manufacturer known for memory products, including NOR Flash used in embedded and industrial systems.
The details
The kit includes a CRA Security Objective Mapping, hardware integration guidelines, a low-level security library with sample code, a CRA integration test suite, a conformity checklist, reference designs, and open-source resources. W77Q can serve as external NOR Flash in platforms whose package, voltage, interface, and system requirements align, and it is designed to be integrated with minimal board-level changes.
Timeline
November 6, 2026: Winbond announced the CRA Conformance and Integration Kit.
The Tech Race
The EU Cyber Resilience Act sets cybersecurity obligations for connected products sold in the European Union, shifting compliance responsibility onto hardware and firmware makers. Component suppliers such as Winbond are responding by packaging certified security components with conformance documentation.
Manufacturers of connected devices in industrial automation, networking, smart building, energy, and smart appliance categories may use the kit to structure their CRA readiness work. The kit does not replace product-level conformity assessment, so manufacturers still need to verify compliance of their finished products.
The takeaway
Security certification of a component is a building block rather than a final answer for regulatory compliance. Product teams preparing for the Cyber Resilience Act should plan for product-level evidence in addition to component-level credentials.
Further reading
For more on chip-level security and component design, explore Semiconductors coverage.
More information
Learn more about Winbond Secure Flash products and solutions.
Source note: This article includes information reported by CIE.
