Strengthen your cybersecurity journey

Quarkslab’s security solutions and services not only boost your defenses against cyber threats, but also help you comply with regulatory mandates.

By investing in the latest certifications and qualifications, we help you navigate stringent requirements with confidence.

EU Cyber Resilience Act

A practical guide to lay the foundations for compliance

Access the brochure

Compliance and Regulations

We adhere to a number of regulatory requirements set forth by European and global governing bodies and help you achieve compliance.

Data Protection

EU General Data Protection Regulation (GDPR)

Quarkslab respects the GDPR requirements for proper data handling. Built on the principle of privacy by design and default, we ensure that your data belongs to you.

FIDO

Traditional authentication methods, such as usernames and passwords, can be cumbersome and insecure. We provide security consulting and services to help organizations secure their existing solutions and comply with FIDO standards and security considerations. Our expertise in security audits and vulnerability assessments ensures proper compliance and prioritizes user data protection.

Healthcare

Critical Sectors

Automotive

Healthcare Regulations (FDA, MDR, HAL)

Through security audits, vulnerability assessments, and ongoing security guidance, we help healthcare organizations tackle regulations, including FDA Pre and Post-market regulations, MDR (Medical Device Regulation) 2017/745, and HAS directives. Our expertise empowers you to safeguard sensitive patient data, ensure the security of medical devices, and mitigate advanced cybersecurity threats.

NIS 2 Directive

NIS 2 introduces stricter requirements focused on strengthening cybersecurity for critical sectors within the EU.
Quarkslab supports your strategy towards cyber risk management and building resilience.

UNECE

To comply with UNECE R155 and R156 regulations, vehicles must undergo rigorous cybersecurity assessments before they can be approved for sale. Quarkslab offers assistance to manufacturers and tier 1 vendors, facilitating audits and strengthening of electronic and IT systems within vehicles. Our expertise ensures that cars achieve the necessary cybersecurity homologation standards.

Critical Sectors

NIS 2 Directive

Automotive

UNECE

IoT & Embedded Devices

Radio Equipment Directive (RED)

The RED Delegated Act has been updated with additional security mandates for radio equipment: network protection, personal data & privacy protection, and protection from monetary fraud. Address 100% of the new cybersecurity requirements with Quarkslab.

Cyber Resilience Act

Quarkslab’s holistic software protection solution enables manufacturers, importers, and distributors of digital products to address the essential security requirements and achieve compliance with the upcoming European Cyber Resilience Act (CRA).

ETSI EN 303 645

The European Standards Organization establishes a security baseline for consumer IoT products and provides a basis for IoT certification schemes.
Quarkslab helps you address the security and data protection provisions of consumer IoT devices.

PSTI

The Product Security and Telecommunications Infrastructure Act places cybersecurity requirements on manufacturers and distributors of internet-connected consumer products in the UK.
Quarkslab helps you address the security obligations for your connected devices and achieve compliance.

Mobile Payment & Financial Entities

OWASP

The OWASP Mobile Application Security Verification Standard (MASVS) is the industry standard for mobile app security, widely used by Software Architects and Developers to develop secure mobile apps.
Quarkslab helps you address the requirements to protect against tampering, static and dynamic attacks, and more by protection measures and audit capabilities.

DORA

The Digital Operational Resilience Act lays down security requirements for network & information systems supporting financial entities in the EU. Quarkslab addresses the requirements related to threat detection, incident response, and recovery.

CB

Quarkslab’s audit facility is approved by the French Payment Scheme Cartes Bancaires to perform an MPOS evaluation of your solution according to Cartes Bancaires’ MPOS standard. Quarkslab helps you get Cartes Bancaires’ approval to sell MPOS solutions on the French market.

PCI

Quarkslab’s software protection suite and pre-audit services enable providers to ensure that their mobile payment acceptance applications comply with PCI MPoC & CPoC requirements.

Certifications

At Quarkslab, our software and services boast prestigious cybersecurity certifications, validated by trusted
bodies. These certifications not only foster trust in our offerings but also help our customers get their
products certified faster, so they can innovate confidently and reach the market sooner.

EMVCo Evaluation

An independent third-party lab has successfully certified all components of Quarkslab’s software protection solution under the stringent evaluation process for Software-Based Mobile Payment Solutions. Our solution is also the first product worldwide to have a white-box cryptography component certified under this evaluation process.

NIST-FIPS Pre evaluation

Quarkslab’s cryptographic keys protection solution has successfully cleared the NIST algorithm certification process, enabling our customers to accelerate FIPS certification for their products.

ANSSI CSPN (First-Level Security Certification)

The CSPN (Certificat de Sécurité de Premier Niveau or First-Level Security Certificate) is a French cybersecurity certification program by ANSSI (National Agency for the Security of Information Systems). Our experts support and guide you through the entire CSPN preparation process, ensuring your product is ready for a successful evaluation. As an accredited ITSEF laboratory, we can also conduct the official CSPN evaluation, providing a single point of contact for your entire CSPN journey.

Strengthen your cybersecurity journey

Compliance and Regulations

Data Protection

EU General Data Protection Regulation (GDPR)

FIDO

Healthcare

Critical Sectors

Automotive

Healthcare Regulations (FDA, MDR, HAL)

NIS 2 Directive

UNECE

Critical Sectors

NIS 2 Directive

Automotive

UNECE

IoT & Embedded Devices

Radio Equipment Directive (RED)

Cyber Resilience Act

ETSI EN 303 645

PSTI

Mobile Payment & Financial Entities

OWASP

DORA

CB

PCI

Certifications

EMVCo Evaluation

NIST-FIPS Pre evaluation

ANSSI CSPN (First-Level Security Certification)

Meet your cybersecurity regulatory needs

Solutions

Company

Société

Documents

Documentation