Secure Software Development according to Common Criteria (EAL4+)

The Security Target (ST) document is the centerpiece of certification. It defines the product’s security functions, their purpose, and how they are implemented.

Architecture diagrams, data flow models, API specifications, code documentation, and mapping of requirements to design components.

Test concepts, reports, and cases mapped to security requirements, ensuring repeatability and reproducibility for external evaluators.

Threat modeling, vulnerability assessments, penetration testing, red teaming, public CVE research, and verification of resistance to common attacks.

User manuals, installation guides, and administrator documentation (covering secure defaults, password policies, logging guidance, etc.).

Version control (Git), controlled development environments, documented release processes, access control, and secure software delivery.

Decision-making processes often drag on for weeks and months. As soon as a decision has been made, things have to happen very quickly - you want to see progress as soon as possible (and rightly so!). More resources, more know-how, and quick results are required. Our developers are experienced in throwing themselves into every project without a lot of overhead work and quickly showing visible and yet sustainable results.

Highly specialized programs in particular run quietly in companies for years or even decades. Until an adjustment is necessary - however: Nobody knows who developed the program, where exactly the data comes from or what the program actually does. We help: We analyze, evaluate and familiarize ourselves with the old source code. The code can then be expanded, secured or even completely rewritten in coordination with the partner.

Secure software development is important to us. We believe that it is not enough to just work through compliance checklists. Criminals, hackers and sometimes competitors are not just theoretical threats. Highly secure software architecture and consistently protected software platforms are our speciality. For us, the requirements can never be high enough.

Most of our customers work with us as partners for years. They tell us their wishes and needs, we develop and advise on all topics related to software. Building trust, professionalism and consistently high quality are the pillars of our collaboration. Our lead developers are proud to quickly earn this trust with every new project.

Lots of colorful features, highly secure development, a fully trained, 24/7 on-call development team and the product live tomorrow, ideally, with a new change every day. If the pot of money were infinite, we would do it without any problems. The reality of our partners is usually different. And we know that very well. We minimize costs right from the start, communicate openly, advise on which features are really necessary, how costs can be reduced by using Open Source, for example, which meetings really have added value and how much documentation is useful.

With software, everything is possible. There are almost no limits to the digital world - the most successful companies in the world (the 'Big Five' such as Apple, Google, etc.) are based on an idea that became reality using software. Our job is to bring your ideas to life.