Application Protection & Security Assurance
APSA sets security assurance requirements for organizations that operate, assess, or develop security-sensitive applications.
A specific digital application, product, or defined application system.
Organizations that assess the application security of other organizations.
Organizations that develop security-sensitive applications for themselves or for others.
Certification starts with assessment. It is issued only after the requirements of the chosen APSA standard are satisfied.
Payment starts an assessment. Certification requires a separate decision after the applicable requirements are satisfied.
Start an applicationEvery Certificate of Conformity has a unique number and QR link. The verification page shows the current status, scope, standard version, dates, and Certification Body.
Verify an IDThis certifies that
Application security assessment services, evidence handling, reporting, quality review, and retesting.