
1
min reading time
Click here for the Common Criteria Certification that was issued on the 13th March 2019.
Click here for the Common Criteria Certification that was issued on the 15th May 2019.
CCLAB is a privately owned agile security lab located in Central Eastern Europe, Hungary. CCLAB is a globally recognized evaluation facility under the Italian Common Criteria Scheme (OCSI-Organismo di Certificazione della Sicurezza Informatica) with a professional team of 10+ evaluators and 20+ supporting and test engineers. We are also an accredited ISO 17025 product testing laboratory by NAH (The Hungarian National Accreditation Authority). We have CEH, CISA, CHFI, OSCP and ISO 27001 Lead Auditor certifications. We have clients from all over the world, including DELL, Ascertia, Navayo Group, ID&Trust, Microsec, NXP and others.


This downloadable infographics introduces the Common Criteria Evaluation process to you. Explore now for free.


Learn everything you need to know for a successful Common Criteria certification project. Save costs and effort with your checklist.


Download our ETSI EN 303 635 infographics today and learn about the product certification process for this consumer IoT device cybersecurity standard.

This article provides a strategic guide to the new EUCC assurance levels, explaining what "Substantial" and "High" certifications actually mean for your market access. It demystifies the critical shift from simple EAL numbers to risk-based vulnerability analysis (AVA_VAN), detailing exactly which products require advanced penetration testing versus basic surveys. You will learn how to map your device to the correct assurance category, navigate the new mandatory lifecycle and patching requirements, and avoid the costly trap of over-engineering your compliance strategy.
5
min reading time

This is a comprehensive overview of the transition to EUCC (European Common Criteria-based cybersecurity certification scheme). It effectively highlights the shift from the old, fragmented SOG-IS approach to a unified, risk-based framework under the Cybersecurity Act.
8
min reading time

As the 11 September 2026 reporting deadline approaches, understanding the Cyber Resilience Act (CRA) is essential for all manufacturers of digital products. This blog post explores the key differences and overlaps between the CRA and the EUCC certification scheme, providing a clear roadmap for compliance, risk categorization, and long-term market access.
9
min reading time