§About the centre
An online centre for digital security assessment
We assess websites, applications and APIs for known vulnerabilities. Receive actionable findings and, once certification requirements are met, a certificate backed by a verifiable public registry record.
What we hold to
Independence
We do not build, resell or integrate the products we verify, and our fee never depends on the result.
Transparency
The methodology, the rules, the statuses and every record are public. If it is not in the registry, it does not exist.
Precision
Every certificate states its scope, its exclusions, its date and its methodology edition. Green means only one thing: verified.
Restraint
We publish what a buyer needs and nothing that helps an attacker.
What we do
- Verify digital products against the public V-Standard methodology at four levels of depth
- Maintain the public registry, Trust Pages and signed records
- Re-verify products after material changes and monitor V4 products continuously
- Give buyers and security teams a document they can use in a security review
What we do not do
- Promise absolute security or “certify” a company as a whole
- Publish vulnerability details or private evidence
- Claim accreditation by, or partnership with, standards organisations
- Develop, resell or endorse the products we verify
How certification decisions are made
Issuance is based on results within the agreed scope. Automated findings require an applicability assessment; expert scenarios are used where required by the level. Payment does not imply a successful assessment outcome.