
1
min reading time
We are proud to announce that Securosys SA successfully gained EAL 4+ CC certificate for Primus HSM FW 2.8.21 Series E, Series X .
Primus X-Series HSMs are secure and tamper-proof network security appliances, they are ideally suited to fulfill the highest requirements in high availability systems. Multiple HSMs can be grouped together as clusters across different datacenters, countries, or even continents to provide load balancing and fail-over.
The complete CC evaluation project started last year with an intensive consulting phase. Once all the documents and the product itself were ready, the evaluation phase went smoothly with a great collaboration with Securosys developers.
“It was a pleasure to work with CClab, they were very professional in supporting us to achieve a successful certification. We are also planning the next evaluation project with them; preparations have already started.” - Marcel Dasen, VP Engineering Securosys
Having some challenges due to the pandemic, we managed to conduct a successful evaluation project with remote access.
“Although we couldn’t do an in-person site visit, the development team managed to go to their office and show us remotely how the security measures were applied. Together we identified some issues that were pro-actively fixed, making both the developer area and TOE more secure. Working together and having remote meetings on demand also helped enormously to make the certification process go as smooth as possible and we are looking forward to more projects together. Let’s keep up the good work and make the world more secure together!” - Imre Fodor, Head of Laboratory
Congratulations for the certification!
You can learn more about the product here.


This downloadable infographics introduces the Common Criteria Evaluation process to you. Explore now for free.


Learn everything you need to know for a successful Common Criteria certification project. Save costs and effort with your checklist.


Want to understand the MDR, IVDR regulation? Download our e-book on the latest requirements of medical cybersecurity

This article provides a strategic guide to the new EUCC assurance levels, explaining what "Substantial" and "High" certifications actually mean for your market access. It demystifies the critical shift from simple EAL numbers to risk-based vulnerability analysis (AVA_VAN), detailing exactly which products require advanced penetration testing versus basic surveys. You will learn how to map your device to the correct assurance category, navigate the new mandatory lifecycle and patching requirements, and avoid the costly trap of over-engineering your compliance strategy.
5
min reading time

This is a comprehensive overview of the transition to EUCC (European Common Criteria-based cybersecurity certification scheme). It effectively highlights the shift from the old, fragmented SOG-IS approach to a unified, risk-based framework under the Cybersecurity Act.
8
min reading time

As the 11 September 2026 reporting deadline approaches, understanding the Cyber Resilience Act (CRA) is essential for all manufacturers of digital products. This blog post explores the key differences and overlaps between the CRA and the EUCC certification scheme, providing a clear roadmap for compliance, risk categorization, and long-term market access.
9
min reading time