CRACI Raises €1.4M for EU Cybersecurity Compliance

Finnish cybersecurity innovator CRACI has successfully closed a €1.4 million pre-seed funding round, signaling strong investor confidence in its mission to simplify compliance with upcoming European Union regulations. The capital infusion was spearheaded by Lifeline Ventures, with significant contributions from First Fellow Partners and Wave Ventures. This strategic funding will accelerate CRACI's product development and platform expansion, positioning it to address the imminent demands of the EU's Cyber Resilience Act (CRA), slated to take effect in 2026.

The CRA represents a significant regulatory shift, mandating stringent cybersecurity, documentation, and lifecycle management standards for products with digital components sold within the EU. This legislation is expected to impact hundreds of thousands of businesses globally, creating a substantial market opportunity for solutions that streamline compliance. CRACI's technology is specifically engineered to navigate this complex regulatory environment, offering businesses a robust framework for managing software supply chain security.

Founded in 2025 by a team including Juho Niemi, Dennis Marttinen, Jaakko Sirén, and Petteri Pulkkinen, CRACI addresses the escalating challenges in modern software development. The proliferation of third-party components, open-source dependencies, and AI-generated code has amplified the complexity of software supply chains, making visibility and control increasingly difficult. CRACI's platform aims to provide critical oversight, automating vulnerability tracking and lifecycle management to ensure products meet rigorous security and traceability requirements without hindering development velocity.

Juho Niemi, co-founder and CEO of CRACI, emphasized the critical nature of supply chain security in today's market. "Companies that invest early in robust supply chain security will gain a distinct competitive advantage through accelerated market access and enhanced customer trust," Niemi stated. "Conversely, those relying on manual processes risk significant delays and escalating costs. Our solution empowers organizations to achieve fast and dependable security and compliance without impeding their growth trajectory." He further highlighted how AI-driven development intensifies both application complexity and associated risks, placing greater accountability on companies to secure their entire software output.

The influx of capital will be instrumental in bolstering CRACI's efforts to equip businesses for the CRA's mandates. The company's focus on providing end-to-end visibility and automated compliance processes is particularly relevant as the digital economy expands. The European cybersecurity market is experiencing robust growth, driven by increasing cyber threats and stringent regulatory frameworks like the CRA and NIS2 Directive. CRACI's proactive approach positions it to capture a significant share of this expanding sector.

CRACI's platform offers a comprehensive solution for managing the intricate web of software dependencies and ensuring adherence to evolving security standards. By automating key compliance workflows and providing clear insights into software supply chain risks, CRACI enables organizations to meet the CRA's stringent requirements for control, traceability, and continuous security. This strategic funding round underscores the growing demand for specialized cybersecurity solutions tailored to meet complex regulatory demands in the European market.