Standards and regulations we cover.
Most rules do not ask for a certificate. They ask you to test your app and keep the evidence. We test it and give you that evidence, and for the standards where an accredited body issues the result, we get you ready for it.
Mobile app security.
Payments.
PCI MPoC
The vulnerability assessment and penetration test required before your PCI MPoC laboratory evaluation.
Pre-evaluation for an accredited labEMVCo SBMP
Pre-evaluation of your payment app, SDK or protection tool before its EMVCo SBMP laboratory evaluation.
Pre-evaluation for an accredited labPCI DSS
Application-layer penetration testing of your app and its API for requirement 11.4.
PSD2
Testing of your strong customer authentication, as evidence for the independent audit.
Connected and medical devices.
CRA
Security test reports for your Cyber Resilience Act technical documentation.
RED and EN 18031
Security testing of connected radio equipment and its app against EN 18031.
ETSI EN 303 645
Assessment of consumer IoT devices and their companion apps against the baseline.
MDR
Security testing and code analysis for your medical device technical documentation.
Sector and data regulation.
DORA
Independent yearly testing of the apps behind your critical or important functions.
NIS2
Security testing of your app and its API for your NIS2 risk management.
GDPR
Testing the effectiveness of your security measures under Article 32.
ENS
Testing for your app's ENS security acceptance before it goes into production.
Certification schemes.
EUDI wallet
Pre-evaluation of your EU Digital Identity wallet app before its certification.
Pre-evaluation for an accredited labCommon Criteria and EUCC
Pre-evaluation of your product before the accredited Common Criteria or EUCC laboratory.
Pre-evaluation for an accredited labMASA
Google Play's independent security review, issued by an Authorized Lab against the OWASP MASVS. We assess your app and get you ready.
Pre-evaluation for an accredited lab
Not sure which one applies to your app?
Answer a few questions about your app and your business, and we will point you to the standards most likely to apply. Or tell us about it and we will map it with you on a scoping call.