The challenge of the OSCRAT project lies in addressing the evolving cybersecurity and regulatory needs of European SMEs amidst the introduction of the Cyber Resilience Act (CRA). This includes tackling issues such as limited resources for compliance, a lack of accessible security tools, and vulnerability in the modern digital landscape. The aim is to provide small and medium sized enterprises, decision-makers, and industrial associations with an open-source, completely free tool that ensures seamless regulatory compliance, enables effective risk management, and offers clear resources to enhance overall cybersecurity practices.