Security Certifications
IEC 62443-4-1
Our IEC 62443-4-1 certification on secure product development lifecycle requirements confirms that Secomea develops and maintains secure products by following a secure development lifecycle (SDL), including a secure-by-design development methodology, secure implementation, patch management, and product end-of-life. This certification also demonstrates Secomea's ability to identify and respond to vulnerabilities and work with customers to mitigate their risks.
IEC 62443-3-3 & IEC 62443-4-2
The Secomea solution periodically undergoes third-party audit assessments to demonstrate compliance under IEC62443 standards. This certification on system security requirements and security levels attests to Secomea’s compliance with the technical control System Requirements (SRs) associated with Identification and authentication control (IAC), Use control (UC), System integrity (SI), Data confidentiality (DC), Restricted data flow (RDF), Timely response to events (TRE), and Resource availability (RA).
Industry 4.0
Secomea's solutions are officially certified as Industry 4.0 enablers compliant with the Reference Architectural Model Industrie 4.0 (RAMI 4.0) and IEC/PAS 62443-3 standards. This certification attests to Secomea's flexibility and security as a communication broker for remote machine maintenance for machine builders and factory operators, enabling I4.0 multi-dimensional communication relationships and safe supplier-customer connectivity.
Security concept audit report
Secomea’s solution was audited by a third-party independent assessment body, TG alpha GmbH, which assessed the compliance of our security controls against IEC 62443-3-3 and IEC 62443-4-2, international standards for Industrial Automation Control Systems (IACS) components, as well as the IT baseline security protection requirements defined by the German Federal Office for Information Security (BSI).
ISAE 3402 Assurance Report
Our third-party ISAE 3402 report attests that our internal controls are adequate to ensure the security of Secomea’s services. This report refers to the GateManager and the relating controls, attesting that the controls were suitably designed, implemented, and tested – and providing reasonable assurance that the control objectives stated in the description were achieved, operated effectively throughout the period from 7 March 2024 to 17 February 2025.