CRA Incident Clock
Deadlines, required report content, an awareness record and a verifiable receipt.
Art. 14 reporting live since 11 Sep 2026: 24h / 72h / final-report clocks.
FREE TOOLS · RANKED BY WHAT'S DUE FIRST
Trust must be checkable.
Six working tools for the obligations landing now. Use them in the browser or add them to your agent over MCP. Every result carries a receipt you can verify yourself. No account needed.
MCP Evidence Probe
Audit tools/list manifests for injection and questionnaire gaps. Hash-chain every tool call.
Security questionnaires now ask for agent tool-call records. Complements your gateway.
C-UAS After-Action Builder
Detection logs into a post-operation report with Remote ID, time-to-notify and IFR clocks.
IFR in force since 1 Jul 2026: 48h post-op report, 6-year audit trail. FEMA-grant fundable.
PQ Signature Inventory
Find RSA/ECDSA/EdDSA in certificates, CycloneDX SBOM/CBOMs and configs.
CNSA 2.0 acquisition gate on 1 Jan 2027. FAR PQC rule due Dec 2026.
INSM Retention Checker
CIP-015 readiness score plus a Merkle-root attestation over your INSM data manifest.
CIP-015-1 INSM from 1 Oct 2028. R3 requires INSM data to be protected from tampering.
Examiner Evidence Pack Builder
Map program documents to examiner evidence expectations (NIST CSF 2.0 / CRI Profile functions).
Exam cycles never stop. Bring evidence your examiner can verify offline.
Use them from Claude, Cursor or VS Code
Every tool is a Hugging Face Space running as an MCP server. Click the MCP badge on any Space, or add one to your client config:
{ "mcpServers": { "ssx360-cra": { "url": "https://ssx360corp-cra-incident-clock.hf.space/gradio_api/mcp/" } } }