Homepage - CERTIFAI

Agile conformance assessment for cybersecurity CERTIFication enhanced by Artificial Intelligence

The Current Cyber Landscape

Addressing Cybersecurity Challenges with CERTIFAI

The rise in successful cyberattacks targeting hardware and software products has led to staggering global losses, estimated at EUR 5.5 trillion by 2021, according to the EU Cyber Resilience Act. These breaches are symptomatic of inadequate cybersecurity practices, manifested through widespread vulnerabilities and outdated approaches in identifying and mitigating evolving cyber threats. Maintaining continuous compliance with regulations, industry standards, and best practices further compounds this challenge.

CertifAI MIDTERM WORKSHOP PRAGUE

Video Recording from the CERTIFAI Workshop

CERTIFAI MIDTERM WORKSHOP PRAGUE

Presentation from the Midterm Workshop – February 13, 2025, in Prague

1_CERTIFAI_Workshop_Welcome

2-3_CertifiAI-presentation_WS FEB13 Tecnalia

4_CertifiAI-UC1-Railway

5_CertifiAI-WS Prague_SCHN_UC2

6_CERTIFAI_UC3_Mindchip_usecase

7_CertifiAI-UC4_Workshop_presentation_CTL

8-CertifAI_Auditors view_DNV_Per_Myrseth_shared

9_CERTIFAI Midterm workshop - SAC Composer TECNALIA Iker Lasa

11_CERTIFAI Integrated Framework

12_WP5 ThreatSpider + ML-Vul Detection [Prague 13.02.2025]

13_CERTIFAI_Workshop_Closing

You can download the presentation by clicking the icon.

Challenges of Certification

The Need for Continuous Security Assurance

To fortify digital technologies and mitigate the impact of cyber threats, it’s imperative to evaluate ICT products, services, and processes against security standards throughout their life cycle. However, the conventional certification process remains static and costly, failing to accommodate the dynamics of agile product delivery. Continuous updates and alterations in requirements often expose vulnerabilities, posing significant risks to both users and companies‘ reputations.

Revolutionizing Security Assurance

CERTIFAI's Innovative Approach

CERTIFAI's Response to Challenges

In response to these formidable challenges, the CERTIFAI project emerges as an innovative solution. It endeavors to create an open software framework employing AI-driven, cost-efficient continuous assessment and (re-)certification methods specifically tailored for ICT products, processes, and services. This proactive approach addresses the evolving cybersecurity landscape by ensuring robust compliance throughout the product life cycle.

AI-Driven Continuous Assessment

CERTIFAI’s focus lies in the development of an open software framework designed to integrate AI-driven mechanisms for continuous assessment and (re-)certification. By harnessing the power of artificial intelligence, this framework aims to provide a cost-effective and adaptive solution. This strategy ensures ongoing compliance with established cybersecurity requirements, standards, and technical specifications, fostering resilience against cyber threats.

Anchored in Cybersecurity Compliance

Anchored in the EU Cybersecurity Act, CERTIFAI is committed to leveraging recognized cybersecurity mandates, standards, and technical specifications. This strategic anchoring ensures that the software framework developed maintains sustained compliance throughout the life cycle of ICT products, processes, and services. By adhering to these established principles, CERTIFAI solidifies its role in fortifying cybersecurity measures within the digital landscape.

CERTIFAI Framework: Strengthening Cybersecurity Continuously

Enabling Continuous Assurance

The CERTIFAI framework incorporates crucial elements aligned with the ENISA Cybersecurity Threat Landscape Methodology:

evelopment and Continuous Updates of Threat Models:

Identifying potential threats through risk assessment.

Vulnerability Testing based on Threat Models:

Detecting vulnerabilities inherent in products.

Detection and Mitigation of Non-Compliance:

Ensuring continuous adherence to standards and regulatory requirements.

Empowering Cybersecurity in the EU

Towards a Secure Digital EU

CERTIFAI will undergo evaluation and demonstration across four distinct use cases, offering an open resource for the EU’s research and industry communities. By enabling lean re-certification processes, CERTIFAI empowers manufacturers to proactively prevent, detect, counter, and respond swiftly to cyber threats, fostering a more secure and trustworthy digital environment within the European Union.

Our Diverse Network of CERTIFAI Project

Project Partners

The CERTIFAI project is a collaborative endeavor that brings together a diverse array of partners, each contributing their expertise and resources towards achieving our shared goal of enhancing cybersecurity in the digital landscape. Our partners include:

UBITECH

TTTech Computertechnik AG

HITACHI

SCHNEIDER ELECTRIC ESPAÑA SA

SIMULA RESEARCH LABORATORY

NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY

DNV AS

CATALINK LIMITED

MINDCHIP

ELEKTROTECHNICKÝ ZKUŠEBNÍ ÚSTAV, s.p.

FUNDACION TECNALIA RESEARCH & INNOVATION

0.1 €

Trilion € For Global Annual
Cost of Cybercrime

0.1 %

Time of vulnerability testing and threat mitigation testing is reduced by 30%

Professional project partners

Explore CERTIFAI: Frequently Asked Questions

Explore commonly asked questions about CERTIFAI, your gateway to enhanced cybersecurity solutions.

Get quick insights into our project’s objectives, methods, and how we tackle evolving cybersecurity challenges.

Please note that we continuously update this section to provide the latest information. Discover concise answers that detail CERTIFAI’s unique approach, benefits, and how it stands apart from traditional certification methods.

What is the primary goal of the CERTIFAI project?

The CERTIFAI project aims to create a cost-effective AI-driven framework for continuous assessment and certification of ICT products, processes, and services.

What approach does CERTIFAI take towards addressing cybersecurity challenges?

CERTIFAI leverages the EU Cybersecurity Act and established cybersecurity requirements to ensure that certified products maintain compliance throughout their life cycle.

How does CERTIFAI plan to assist manufacturers in preventing cyber threats?

CERTIFAI will provide tools for developing threat models, vulnerability testing, and detecting non-compliance, empowering manufacturers to counter and swiftly respond to cyber threats.

Why is there a need for continuous assessment of ICT products and services?

To mitigate the impact of evolving cyber threats and ensure conformity to security standards throughout their life cycle.

What's the challenge with the traditional certification process?

It’s predominantly static, costly, and not adaptable to agile product updates, leaving products vulnerable to cyber risks with each change.

How does the CERTIFAI project address cybersecurity challenges?

By developing an open software framework for AI-driven continuous assessment and (re-)certification, aligning with established standards to ensure ongoing compliance throughout a product’s life cycle.

Newsroom

Welcome to the CertifAi Newsroom – your source for the latest updates, press releases, media coverage, and insights from the world of AI assurance and cybersecurity certification.

CERTIFAI Final Conference Showcases AI-Supported Cybersecurity Certification Solutions

15. 6. 2026

Prague, Czech Republic, 11 June 2026 – The CERTIFAI consortium successfully concluded its three-year Horizon Europe project with the CERTIFAI Final Conference, bringing together experts from industry, research organisations, certification bodies, public authorities, and cybersecurity practitioners to discuss the future of cybersecurity certification and conformity assessment. Held in a hybrid

Join the CERTIFAI Final Conference online

5. 6. 2026

Join the CERTIFAI Final Conference online The CERTIFAI project will conclude with its Final Conference

CertifAI Final Conference Agenda

25. 5. 2026

Get in Touch

Have questions, need more information, or interested in collaborating? Don’t hesitate to reach out. Our team is here to assist you.

Stay updated with our latest developments, cybersecurity insights, and industry news by following us on social media.

Newsletter Subscription

Subscribe to our newsletter and be the first to receive updates on cybersecurity trends, upcoming events, and exclusive insights.