
Securus Consulting Group is an agile group established in 2020, 100% Australian owned and operated, and focused on being a capability enabler for other organisations. Our expertise is based on our staff having spent their entire careers working in fives-eyes agencies and industries on developing new techniques and capabilities that test, assess, evaluate cyber and deploy security systems, devices, and products to a high level of assurance to protect information at all levels of classification and sensitivities. Our team offers expertise in ICT security and architecture, including systems design, audit, cryptography, hardware, software, cross-domain solutions, and security policy, at all levels of assurance.

A global leader in applied safety science, UL Solutions transforms safety, security and sustainability challenges into opportunities for customers in more than 110 countries. UL Solutions delivers testing, inspection and certification services, software products, and advisory offerings that support our customers’ product innovation and business growth. We help our customers innovate, launch new products and services, navigate global markets and complex supply chains, and grow sustainably and responsibly into the future. Our science is your advantage.

Brightsight by SGS is the leading independent laboratory for connected products security evaluations, recognized by more than 50 certification schemes worldwide. With over 40 years’ expertise, Brightsight conducts impartial evaluations and operates as a licensed Certification Body. Leveraging its integrated one-stop services and the global reach of SGS, Brightsight helps clients navigate evolving regulatory demands and provides predictable and trusted evaluations in a seamless certification journey.

Intertek Acumen Security is a worldwide leader in cybersecurity evaluation and certification, enabling you to get products into the hands of customers faster. Our team has extensive expertise in a diverse set of standards and certifications to meet your needs, including FIPS 140-2 and 140-3, Common Criteria, CSFC, UC APL, and more. While our security know-how is unrivaled, it’s our service and overall project management that truly sets us apart. Intertek Acumen Security is part of Intertek Group (“ITRK”), a FTSE 100 listed company on the London Stock Exchange with more than 40,000 employees across 1,000+ offices around the world.

Applus+ Laboratories is a division of the Applus+ Group that provides testing and certification from a network of multidisciplinary laboratories in Europe, Asia, and North America. Our Cybersecurity laboratories support developers of ICT products, components, and systems to demonstrate the compliance with applicable requirements and standards. In 2022, the cybersecurity labs jtsec and Lightship Security became part of Applus+. We provide Common Criteria evaluations worldwide, EAL based and PP-based for various schemes, including NIAP-listing and SOG-IS Technical Domains. We are also active contributors for EUCC scheme definition. Our labs are accredited for FIPS 140-3, the Spanish LINCE, and other schemes.

TÜV Informationstechnik (TÜVIT), based in Essen, Germany, is one of the world’s leading service providers for Common Criteria (CC) evaluations of hardware and software and is authorized to perform evaluations up to the highest assurance level. TÜVIT offers the possibility of completing EU CC certifications as wells as CC certifications in Japan (JISEC), Singapore (SCCS) or Qatar (QCCS). With more than 80 licensed evaluators, we have successfully completed over 1.000 evaluation projects according to CC.

Accelerating Trust Through Agile Evaluation Founded in 2013 and now part of the global QIMA Group, CCLab is a premier cybersecurity laboratory dedicated to high-standard security evaluations and consultations. We specialize in Common Criteria (ISO/IEC 15408) across a wide range of assurance levels, supporting diverse sectors including Network Devices,, IoT, and Industrial Control Systems. What sets CCLab apart is our “Agile” approach. By integrating agile project management into the evaluation process, we provide our clients with predictable timelines, reduced costs, and industry-leading speed. Our expertise extends beyond CC to modern regulatory requirements such as the EU Cyber Resilience Act (CRA), Radio Equipment Directive (RED), and sector-specific standards for medical and automotive industries. Backed by international accreditations (including OCSI and TrustCB) and QIMA’s presence in over 100 countries, CCLab offers a seamless, professional journey from pre-evaluation to final certification.

As a leader in testing, certification and inspection industry, we ensure safety, security and sustainability in the three areas of life on the road, at work and at home.

High-quality IT-security certifications challenge the budget and schedule of developers and vendors of IT products. We support our customers while facing these challenges and supply them with a competitive advantage.


Badge/Lanyard Sponsor Teron Labs is a FIPS 140 laboratory based in Australia and a Common Criteria (CC) laboratory under the Australian Information Security Evaluation Program (AISEP). Our evaluations are regularly cross-posted on the NIAP PCL. We aim to help organizations globally achieve certifications in a timely and predictable manner. Understanding the impact of delays on sales, we work closely with clients throughout the product development and evaluation process to ensure certifications are obtained without roadblocks. Unlike larger, multinational cybersecurity firms, Teron Labs specializes in security testing for ICT products, particularly in FIPS 140 and Common Criteria. Our focused expertise, simpler business structure, and low overheads give us a competitive edge in delivering personalized consulting and testing solutions.

Company Name Zhejiang Wonsec Technology Co.,Ltd Address Kechuang Building B, No. 586 West Ring Road, Keqiao District, Room 1411 Shaoxing, Zhejiang 312030 CN Website / URL https://www.wonsec.com Company Description Founded in 2019, Wonsec Technology is an innovative information security technology company integrating security tool research and development with security services. We possess extensive experience in successfully guiding ICT products through Common Criteria (CC) certification. We independently develop a security compliance assessment tool specifically designed for the CC certification. It connects product manufacturers, service providers and evaluation labs. It covers the entire lifecycle from security target definition, design and development to compliance testing. By intelligently supporting the preparation of compliance evidence and streamlining the evaluation and audit process, the tool significantly lowers the certification threshold and reduces the evaluation cycles. In addition, relying on its proprietary W-Cert (formal modeling and verification) and W-AVC (formal source code verification) tools, Wonsec precisely meets the stringent technical requirements of high-level CC certifications such as EAL4+ and above.

eShard is a cybersecurity company specialized in security testing, combining cutting-edge tools with hands-on expertise transfer. Over the past 10 years, we have helped organizations across hardware and software security to stop reacting to threats and start preventing them. Our mission is simple: to make our clients stronger and self-reliant against evolving cyber risks.

The Cyber-security Excellence Hub in Estonia and South Moravia (shortened CHESS) brings together leading cybersecurity institutions and builds on the strengths of both regions to address important cybersecurity challenges. South Moravia is a major ICT industry & education powerhouse of the Czech Republic, with a strong focus on cybersecurity. Estonia is among the most advanced digital societies globally, with exceptional e-government infrastructure. The project has universities, large and small companies, but also governmental information security agencies on board. CHESS activities focus on six key challenge areas: Internet of Secure Things, Security Certification, Verification of Trustworthy Software, Security Preservation in Blockchain, Post-Quantum Cryptography, and Human-centric Aspects of Cybersecurity. Beyond its core consortium, CHESS aims to build a broader network of collaborations, connecting the strengths of South Moravia (certification, human-centric research) and Estonia (blockchain, post-quantum cryptography, e-government) to facilitate a secure transition to full-scale digital societies.

Red Alert Labs is an IoT security provider helping organizations trust IoT solutions throughout their entire life-cycle. We provide a fully comprehensive IoT security by design, risk management, consulting, audit and certification services supported by automated processes. We created the 1st Worldwide IoT security & certification software platform and a unique specialized and independent IoT security lab with a disruptive business offer solving the technical and commercial challenges in IoT.

BiometricUpdate.com is the leading news property that publishes shareable breaking news, analysis, and research about the global biometrics market.

The Common Criteria Users Forum (CCUF) was founded in 2012 and is a community based around those using the Common Criteria and ISO/IEC 15408 standards. The CCUF is an evolution of the CC Vendors’ forum (founded in 2004) and the CC Forum (founded in 2010). The Common Criteria Users’ Forum mission is to provide a voice and communications channel between the CC community and the CC organizational committees, CC evaluation schemes, and policy makers.

The EU Common Criteria Information Sharing and Analysis Centre (EUCC ISAC) is an international non-profit association committed to fostering collaboration and harmonization in cybersecurity certification across Europe and beyond. By gathering public and private stakeholders, its mission is to build trust and interoperability within the EUCC scheme ecosystem, fostering a robust market for certified ICT products that address evolving technological challenges and threat landscapes. The ISAC provides the European Commission, EU Member States, and ENISA with key interpretation and methodologies update to ensure consistent and effective implementation of the EUCC scheme. The EUCC ISAC contributes to maintaining the state of the art through the provision of attack quotations and the development of an up-to-date attack catalogue.

With over 25 years of experience, Eurosmart gathers technological experts in the field of Digital Security. This Brussels-based association advocates for a high security level in digital interactions.
Members of Eurosmart are designers or manufacturers of secure elements, semiconductors, smart cards, systems on chip, High Security Hardware and terminals; biometric technology providers; system integrators; secure software and application developers and issuers. Members are also involved in security evaluation as laboratories, consulting companies, research organisations and associations.

GlobalPlatform is a technical standards organization that enables the efficient launch and management of innovative, secure-by-design digital services and devices, which deliver end-to-end security, privacy, simplicity and convenience to users. It achieves this by providing standardized technologies and certifications that empower technology and service providers to develop, certify, deploy and manage digital services and devices in line with their business, security, regulatory and data protection needs.

OASIS is a nonprofit consortium advancing open standards and open source development on a global scale. We’re the home of KMIP, STIX, TAXII, OpenC2, PKCS#11, SAML and CACAO course-of-action playbooks. One of our largest open source projects is the Open Cybersecurity Alliance (OCA). OCA is building an open ecosystem where cybersecurity products interoperate without the need for customized integrations. OCA open project operates independently under industry-approved process and IPR policies. All are welcome to participate.

Trusted Connectivity Alliance (TCA) is a global, non-profit industry association working to enable trust in a connected future. The organisation’s vision is to drive the sustained growth of a connected society through trusted connectivity which protects assets, end user privacy and networks.
TCA members are leaders within the global Tamper Resistant Element (TRE) ecosystem, and work collectively to define requirements and provide deliverables of a strategic, technical and marketing nature. This enables all stakeholders in our connected society to benefit from the most stringent secure connectivity solutions that leverage TCA members’ expertise in tamper proof end-to-end-security.