Cybersecurity Testing & Certification
Product security validation from attack-surface mapping to remediation retest across devices, firmware, apps, web, API and cloud.
View service →EN 18031 Testing · CRA Certification
CRA & EN 18031 Cybersecurity Testing — Enter Global Markets with Confidence
Product cybersecurity testing for EU RED, EN 18031 and CRA requirements, including applicability assessment, gap analysis, laboratory verification and remediation retesting.
RED CybersecurityEN 18031 TestingWireless & IoT productsEU CRACRA Compliance2026 / 2027 milestonesGlobal Market AccessCybersecurity Market Access TestingCN · EU · UK · Japan · Australia
EN 18031Product security testing
GlobalMulti-market support
1 dayConsultation response
RED Article 3(3)
EN 18031 Testing
For wireless and connected products, we map EN 18031-1/-2/-3 under RED cybersecurity requirements, then deliver applicability assessment, gap analysis, design review, pre-check, remediation retest and reporting with traceable evidence.
View full EN 18031 pathwayEN 18031-1 Network protectionInterfaces, updates, sensitive parameters, communications
EN 18031-2 Data and privacyProtection of personal, traffic and location data
EN 18031-3 Fraud protectionProtection of money, monetary value and payment functions
- 01Applicability
Map product connectivity to EN 18031-1/-2/-3.
- 02Gap analysis
Review assets, interfaces and security mechanisms.
- 03Lab testing
Execute standard-based verification with evidence.
- 04Reporting
Retest after remediation and issue RED report.
Typical deliverablesApplicability recordGap & remediation listLab test reportNB pre-check evidence
EU Cyber Resilience Act
CRA Readiness & Certification
Regulation (EU) 2024/2847 covers products with digital elements placed on the EU market. Manufacturers should align risk assessment, product testing, vulnerability handling and security updates in one evidence chain.
View CRA classification & timelineReporting obligations applyEstablish 24/72h internal response for vulnerabilities and serious incidents
Main obligations applyComplete requirements, technical documentation and post-market monitoring
- 01Scope & role
Confirm product, cloud capabilities and EU responsibilities.
- 02Classification
Select path for Default, Class I, Class II or Critical.
- 03Annex I evidence
Build risk, SBOM, testing, updates and vulnerability records.
- 04Delivery
Gap list, retest records, documentation index and roadmap.
Typical deliverablesScope & classificationPrioritized gap listTest & remediation evidenceImplementation roadmap
Start from your product
Find your
compliance pathway
Choose the route by product type, target market and project stage before scheduling tests and technical documentation.
Wireless products
Entering the EU with RED cybersecurity assessment
Determine applicable EN 18031-1/-2/-3 parts, then plan design review, pre-check, remediation and reporting.
EN 18031 pathway Consumer IoTBuild a verifiable product security baseline
Default passwords, vulnerability disclosure, updates, sensitive parameters, communications and data deletion.
EN 303 645 pathway Hardware & softwarePrepare for CRA 2026/2027 deadlines
Risk assessment, SBOM, vulnerability reporting, updates, documentation and post-market monitoring.
CRA pathway Not sure yetWhich regulations apply to your product?
Share product type, connectivity and target markets for an initial applicability review.
Request initial assessmentOur services
Nine security &
market access capabilities
From applicability and gap analysis to lab testing, remediation retest and technical file delivery across CN, EU, UK, Japan and Australia.
EN 18031 Testing CapabilityRED cybersecurity requirements
CRA Readiness2026/2027 milestones
ISO/IEC 17025Quality system in operation
EN 18031 project supportWireless & connected experience
Testing scope, accreditation status and deliverables are subject to formal contracts, certificates and reports.
EU EN 18031
RED cybersecurity harmonised standard testing for radio equipment.
View service →ETSI EN 303 645
Baseline security assessment for consumer IoT products.
View service →EU CRA Compliance Services
Applicability, classification, Annex I gap analysis, SBOM, cybersecurity testing and vulnerability handling for products with digital elements.
View service →UK PSTI Compliance
Mandatory security requirements, declarations of conformity and technical evidence for UK connected consumer products.
View service →Japan JC-STAR Security Label
Technical assessment, checklists and application evidence for Japan IoT security labelling.
View service →Australia Smart Device Security
Mandatory cybersecurity standard readiness and declarations of conformity for Australian smart devices.
View service →European Accessibility Act (EAA)
Perceivable, operable, understandable and robust testing for digital products and services.
View service →Connected Camera Security Label
TC260-PG-20265A testing for basic, enhanced and leading connected camera security levels.
View service →Wireless module security
From wireless access to business data links
Verify pairing, authentication, keys, permissions, anti-replay, recovery and privacy across your actual product configuration.
Bluetooth / BLEPairing · GATT · Keys · Privacy address
Wi-FiWPA2/WPA3 · WPS · Rogue AP · LAN interfaces
4GSIM/eSIM · APN · AT interface · SMS/data
5GIdentity · fallback · handover · upper-layer encryption
NearLinkSLE/SLB access · auth · session keys · anti-replay
GPS / GNSSLocation permission · NMEA · spoofing · recovery
Laboratory platforms
Hardware signals to runtime state —
complete test evidence
Network instruments, RF tools and security analysis platforms for interfaces, firmware, wireless links, apps and cloud services.
Key regulations
Prepare early for
the European market
From point testing to lifecycle security governance — we turn complex requirements into executable engineering tasks.
Service process
Clear deliverables at every step
Project managers and technical experts work with transparent status, milestones and closed-loop remediation.
01
Assessment
Confirm product scope, markets and applicable standards.
02
Gap analysis
Map assets, interfaces and security mechanisms.
03
Lab testing
Standard-based verification with reproducible findings.
04
Reporting
Retest after remediation and deliver compliance evidence.
Project experience
Measurable EN 18031 outcomes
Applicability assessment, testing and remediation support for connected products.
Real laboratoryvalidation for actual products
About the lab
Not only finding issues —
closing the compliance loop
Shenzhen LSD Testing Technology Co., Ltd. focuses on multi-market cybersecurity compliance under ISO/IEC 17025. We test network devices, firmware, apps, web/API, cloud platforms and full wireless business chains including Bluetooth, Wi-Fi, 4G, 5G, NearLink and GNSS.
Insights
Regulatory & technical updates
Project inquiry
Tell us about your product
and target markets
A technical consultant will contact you within one business day with applicability guidance and initial project advice.
