Building digital trust.

The #1 cybersecurity lab for the connected world.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

The Cyber Resilience 
Act (CRA) is here. 


Secure your market access.

The regulatory landscape is changing, but your time-to-market doesn’t have to suffer delays. At Brightsight by SGS, we transform legal complexity into a clear, structured roadmap.

September 11, 2026:

Mandatory vulnerability reporting comes into effect.

December 11, 2027

CRA certification will be mandatory to market connected products in the EU.

We guide you every step of the way, from initial gap analysis to final compliance, providing the certainty you need to keep your commercial launches on track.

Simplify the cybersecurity 
certification lifecycle

Brightsight provides expertise across multiple stages of the cybersecurity certification ecosystem through distinct and independent functions. Our ITSEF performs security evaluations, while our Certification Body conducts certification activities under its own governance and decision-making processes, ensuring impartiality and regulatory compliance.
01

ITSEF Evaluation 

Security assessments are conducted against the requirements of the applicable certification scheme. The evaluation provides the technical evidence required for certification consideration.

02

Independent Certification Process

The Certification Body reviews the evaluation results and all required evidence through an independent certification process, following applicable accreditation and regulatory requirements.
03

Certification & Ongoing Compliance

Once certification requirements are met, the certificate is issued and maintained according to the applicable scheme, helping organizations demonstrate compliance and access regulated markets.

Global Scale. Local Expertise.

We back our digital trust architecture with proven, world-class scale. Wherever you design, manufacture, or market your products, our global network ensures unmatched certification capacity and regulatory certainty.

0

Global locations

Delft (HQ), Graz, Madrid, Barcelona, Meyreuil, Columbia, Clackamas, Beijing, Shanghai, Guangzhou, and Singapore.

0 +

Security standards & global recognitions

Delft (HQ), Graz, Madrid, Barcelona, Meyreuil, Columbia, Clackamas, Beijing, Shanghai, Guangzhou, and Singapore.

0 +

Years of experience

Leading the IT security evaluation industry since the dawn of digital security.
0 +

Cybersecurity experts

Highly specialized in-house engineers, evaluators, and auditors.
0 +

Projects annually

Successfully evaluated and managed security projects year after year.

Highest security assurance

Fully accredited to evaluate up to the maximum EAL7+ level achievable.

Global leaders in high-assurance sectors.

Our deep technical expertise allows us to embed Digital Trust across any critical connected ecosystem:

Payments & Banking

Unmatched expertise in EMVCo and PCI standards to guarantee flawless, secure financial transactions.

Identity & Government

High-assurance evaluations for complex electronic identity systems (eIDAS) and FIDO2 authentication frameworks (Level 3+).

IoT & Automotive

High-assurance evaluations for complex electronic identity systems (eIDAS) and FIDO2 authentication frameworks (Level 3+).

Data Infrastructures & AI

Scalable, future-proof security architecture for next-generation Data Centers utilizing the advanced OCP S.A.F .E.™ framework program.

Why do market-leading manufacturers trust us?

Independence 
& transparency

We operate with absolute impartiality. We guarantee predictable timelines, structured processes, and fair, objective decisions executed with the rigorous precision of an elite auditor.

In-House 
technical influence

We don't just follow the rules; we help write them. Our experts actively participate in the world's leading European and international standardization commiees to design tomorrow's cybersecurity frameworks.

A global 
strategic partner

As a key pillar of the SGS global network and infrastructure, we combine boutique cyber-expertise with the colossal backing of the world leaders in Digital Trust, testing, inspection, and certification.

Innovation and technical milestones

Hello world!

Welcome to WordPress. This is your first post. Edit or delete it, then start writing!

Read More »

Ready to turn security into your sales engine?

Don't let regulations block your market entry.

Act now, evaluate early, and launch with total confidence.

Stay ahead of the trends. 
Subscribe to The Brightsight Bulletin.

Receive monthly high-level technical analysis, global regulatory intelligence, and expert executive opinions directly to your inbox.