CRACI, a Helsinki-based startup focused on software supply chain security, has raised €1.4 million in pre-seed funding to help businesses prepare for the EU Cyber Resilience Act.

The round was led by Lifeline Ventures, with participation from First Fellow Partners and Wave Ventures. Announced on May 8, 2026, the financing will support CRACI’s effort to automate compliance as companies face new cybersecurity and documentation requirements under the regulation.

Founded in 2025, CRACI builds tools for continuously managing vulnerabilities, archiving software bill of materials history, and tracking compliance without adding separate workflows for engineering teams. The company is positioning itself around a growing regulatory deadline as the Cyber Resilience Act reshapes how software products are developed and maintained across the EU.