What is sec-certs?

We want to become the one-stop shop to explore the Common Criteria, EUCC and FIPS 140 certification ecosystem. We aggregate and annotate certification data, enabling you to perform unified searches, investigate vulnerabilities, analyze trends, compare products side-by-side, subscribe to certificate changes, and take other actions on certified products.

The sec-certs tool is an ongoing research project by the Centre for Research on Cryptography and Security (CRoCS) at Masaryk University. Learn more about our team and research.

sec-certs sec-certs

Main features

Unified search

Search certificates relevant for your product, filter certificates by categories or status. Explore the certificates without downloading and reading countless PDFs.

We download and process certificates weekly, allowing you to search for your favorite Common Criteria, EUCC and FIPS 140 products.

Search certificates

Explore certificates with AI

Use our AI assistant to help you explore and understand Common Criteria, EUCC and FIPS 140 certificates. Ask questions about a certificate and let the AI guide you through the complex certification documents.

Pick a certificate

Vulnerability investigation

Investigate the vulnerabilities affecting certified products.

We automatically map certificates to CVE entries in NIST's National Vulnerability Database affecting them. The information on relevant CVEs is displayed in the appropriate heuristics section on pages of the affected certificates.

Browse vulnerabilities

Trends and dashboards

We process certification PDFs into structured, machine-readable datasets and chart them, so you can see how the certification landscape evolves.

Browse our prepared analysis, or build a dashboard of your own: pick a collection, add predefined or custom charts and save it for later. The analysis shows preliminary findings - refer to our published research for a more detailed analysis.

Build a dashboard See our analysis

Certificate references

Explore the references between product certificates in a graph. A certificate referencing another certificate often means that its product is built atop of another security relevant product.

We use regular expressions to create references between certificates, making it easy for you to find relationships in our reference graphs or certificate details.

CC references FIPS 140 references

Open data

Each week, we collect thousands of certificate files, convert them into machine-readable datasets, and enrich them with additional metadata.

Full datasets are available below, while individual certificate data can be accessed on each certificate's page.

CC EUCC PP FIPS 140

Python library

Everything on this site is built with our open-source Python library. Install it to reproduce the datasets yourself, or plug the certification data straight into your own analysis.

The documentation includes a quick-start guide, and the code is open to contributions.

Read the docs View the code

Change notifications

Subscribe to notifications about a vulnerability affecting a set of certified products, all changes in a set of certified products or about new certificates.

As a registered user, you can subscribe using the button in certificate details.