Lightship Security Blog

The Communications Security Establishment (CSE) of Canada recently accepted Lightship Security as a Candidate Common Criteria Lab – an important milestones in the approval process to become an accredited IT security test lab. Accreditation is performed by the Standards Council of Canada (SCC) in partnership with CSE in accordance with ISO/IEC 17025 and allows participation in the twenty-eight nation Common Criteria Recognition Arrangement (CCRA).

“We are looking to disrupt the certifications landscape with our conformance automation software. Adding the Common Criteria lab allows us to drink our own champagne and perform quality certifications faster than ever before. We’re using Greenlight internally to support the accreditation process.” said Jason Lawlor, President of Lightship Security.

Greenlight is the Lightship Security designed and built software platform that automates testing against the latest Common Criteria Protection Profiles. All labs in Canada, regardless of experience are required to demonstrate ongoing technical competence to SCC and CSE reviewers. Lightship will be the first lab to integrate comprehensive automation through the use of Greenlight for real world evaluations.

Lightship Security is proud to announce our partnership with Peach Tech, a Seattle, US based security software firm, to support our customers in their pursuit of product certification against the internationally recognized security standard, Common Criteria (CC).

The Collaborative Protection Profile for Network Devices (NDcPP) has introduced fuzz testing as part of the vulnerability analysis process. The NDcPP is a canary in the world of CC and we can expect to see fuzz testing become a standardized requirement across many Protection Profiles.

We’ve integrated Peach Tech’s Peach Fuzzer platform into our Greenlight service offering to give customers the peace of mind that their products meet the latest CC fuzz testing requirements.

Read our joint press release for all the details.