SGS Brightsight
Dutch security evaluation lab, part of SGS, recognised by the PCI SSC for PTS device evaluation and accredited for EMVCo and Common Criteria.
- Categories
- Compliance audits (SOC 2, ISO 27001), IoT, embedded and product security, Penetration testing, Security consulting and vCISO
- Based in
- Delft, Netherlands
- Founded
- 1984
- Ownership
- Part of SGS
- Certifications
- ISO/IEC 17065
About SGS Brightsight
Brightsight is an independent cybersecurity evaluation lab and certification body. It assesses connected products against security standards and regulations, and it also acts as a certification body. Its work covers pre-evaluation during development through to final evaluation for certification. The company sells security evaluations, professional advisory, and certification services. It serves manufacturers and developers of IT security products, including chips, payment cards and terminals, telecoms and network equipment, and government identity systems. It also runs workshops and training. What sets it apart is that evaluation and certification sit under one roof, with the lab and certification body working together. It says this gives predictable processes, impartial decisions and clear communication. It is preparing to become a Notified Body under the EU Cyber Resilience Act.
Products
- CRA Triage ToolAn online tool that helps manufacturers check whether their product falls under the Cyber Resilience Act and what steps to take next.