Let’s get the IoT landscape less vulnerable for all

**Executive Summary:** This article outlines the EU's proposed Cyber Resilience Act (CRA), which would impose cybersecurity requirements and mandate coordinated vulnerability disclosure policies for products with digital elements across their lifecycle, discusses the market failure of "insecurity-by-design," emphasizes the urgency of vulnerability management, and positions YesWeHack as a provider of VDP and bug bounty solutions to help organisations comply and improve security.