Konfidas GmbH

Certifications made easy

High-quality IT-security certifications challenge the budget and schedule of developers and vendors of IT products. We support our customers while facing these challenges and supply them with a competitive advantage.

The basis for our success

A deep kowledge about the relevant standards combined with modern methods and technical expertise is the basis for our success.

Knowledge of relevant standards

Knowledge of relevant standards

Detailed knowledge about the relevant standards is key for our success. We have not only gathered this knowledge during our many projects; instead, we actively contribute to the development of the relevant standards and follow their development.
Modern tools and methods

Modern tools and methods

We utilize modern methods from software development and apply them to certification processes. This allows us to integrate the certification into the development process of our customers with minimal disruption. In addition, these methods improve the efficiency of the certification and allow to track progress constantly.
Technical Expertise

Technical Expertise

In addition to our experience with relevant standards, we have a deep technical knowledge with respect to the products that undergo certification. Our services do not end with the identification of deficiencies or with the documentation of the current status; instead, we are working close to the development processes of our customers and actively contribute to the development.

Projects

Explore our previous projects to learn about our experiences.

Common Criteria Zertifizierungen

The Common Criteria (aka ISO/IEC 15408) is one of the most important standards for our work. We have supported many developers during their certifications. The following list shows a selection of …

Read more →

Certifications according to Technical Guidelines of BSI

The aim of the BSI’s technical guidelines (BSI-TR) is to disseminate appropriate IT security standards. Technical Guidelines are therefore generally addressed to everyone involved in setting up …

Read more →

Fixed-time cybersecurity evaluation (BSZ)

The BSZ implements the European Standard EN 17640 Fixed-time cybersecurity evaluation methodology for ICT products (FiT CEM). The evaluation follows a risk-driven approach that establishes a high …

Read more →

Trusted by Industry Leaders

We’re proud to work with some of the most innovative companies in the industry.