Product Security Evaluation Services for Payments

In addition to contact and magnetic stripe-based banking cards, other technologies are becoming available for our daily purchases. Physical devices to support contactless payments are being rolled out widely, paving the way to use Android smartphones for electronic payments. The introduction of these new technologies influences security requirements and risk models for mobile payment, payment terminals and payment cards.

Our payment cybersecurity services provide security evaluation of global payment solutions to help you mitigate risk and increase transaction trust.

We are recognized by the major international payment schemes and payment network providers. Our expertise covers thorough security assessments against the following payment schemes and standards:

• EMVCo
• Mastercard
• VISA
• American Express
• Discover/Diners
• UPI
• ELO
• PCI
• Die Deutsche Creditwirtschaft
• Australian Payment Network
• Pay.UK
• Paynet
• NAPAS
• EFTPOS
• Pure
• JCB
• Troy
• Interac
• Common Secc

Why choose SGS product security evaluation services for payments?

We enable you to:

• Perform development in the shortest possible timeframe with our payment domain security evaluations
• Assess hardware and software security concerns with our security design reviews at every stage – from initial design to implementation
• Gain full formal security compliance evaluations for the final implementation, facilitating essential implementation revisions with minimal impact on time-to-market
• Enable your development team to gain higher level knowledge for future developments

We offer essential support at any stage of the development process with our proven concept and track record in helping our customers get certifications:

• Customized training: PIN entry device and terminal security, CC, Android, TEE and more
• Pre-evaluation: design and/or code reviews to identify possible weaknesses in the security architecture of the payment terminal at an early stage
• Pre-testing: predefined penetration tests on hardware, CC documents review, verify CC evidence
• Security evaluation