---
title: "Use cases | CRA, Machinery Regulation and OT security | Edge SDN"
description: "Use cases for machine builders and plant operators: track vulnerabilities on installed machines, report to ENISA in 24 hours and protect machines you cannot patch."
url: https://www.edge-sdn.com/use-cases/
last_updated: 2026-09-19
---

# Start with a real problem

Each use case answers one question that machine builders and plant operators ask us. The answer comes first, the sources are official and the product comes last.

Cyber Resilience Act · Machine builder · System integrator

### Same model, two machines, one exposed: find which shipped machines a new CVE hits

How a machine builder can tell, in minutes, which delivered machines a new vulnerability exposes, and why a CVE list per model gives the wrong answer.

[Read the use case](https://www.edge-sdn.com/use-cases/find-which-machines-a-new-cve-exposes/)

Cyber Resilience Act · Machine builder · Software builder

### Report to ENISA in 24 hours: what a machine builder must do since 11 September 2026

CRA reporting is in force. What counts as actively exploited, the 24-hour, 72-hour and 14-day deadlines, who gets the report and how a machine builder gets ready.

[Read the use case](https://www.edge-sdn.com/use-cases/report-to-enisa-in-24-hours/)

CRA · NIS2 · IEC 62443 · Machine builder · Plant operator

### Reduce the attack surface of an old machine: protect what you cannot patch

Old machines run unsupported software and cannot be updated. How to cut their exposure at the network level without replacing the line or touching the PLC.

[Read the use case](https://www.edge-sdn.com/use-cases/protect-a-machine-you-cannot-patch/)

Machinery Regulation · Machine builder

### Prepare for point 1.1.9: what your machine must know about its own software from 20 January 2027

The new Machinery Regulation puts cybersecurity into CE marking. What points 1.1.9 and 1.2.1 of Annex III ask and how a machine builder prepares.

[Read the use case](https://www.edge-sdn.com/use-cases/machinery-regulation-point-1-1-9/)

We add new use cases regularly.

## See a critical CVE hit a machine

We show you the moment that matters: a new vulnerability lands. One machine is exposed and the other is not. The customer notice is ready to send.

Meet us at 35.BI-MU, fieramilano Rho, 13–16 October 2026