Application Protection & Security Assurance
APSA defines standards for digital applications, application security assessment providers, and secure application development providers.
A specific digital application, product, or defined application system.
Organizations that assess the application security of other organizations.
Organizations that develop security-sensitive applications for themselves or for others.
Certification starts with assessment. It is issued only after the requirements of the chosen APSA standard are satisfied.
Payment starts an assessment. Certification requires a separate decision after the applicable requirements are satisfied.
Start an applicationEvery Certificate of Conformity has a unique number and QR link. The verification page shows the current status, scope, standard version, dates, and Certification Body.
Verify an IDThis certifies that
Application security assessment services, evidence handling, reporting, quality review, and retesting.