Independent cybersecurity directory, built from public sources. Featured listings are paid placements and always labelled. How we work

Keysight (Riscure Device Security)

Accredited payment device security lab: side-channel, fault injection, EMVCo and PCI MPoC.

companyPCI PTS Compliance Testing Companies

Pricing: Not published; laboratory and certification services scoped per engagement.

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed September 2026 · How we review listings

What is Keysight (Riscure Device Security)?

Keysight's device vulnerability analysis business, built on its acquisition of the Dutch security lab Riscure, tests chips, smart cards and embedded devices using side-channel analysis and fault injection: introducing controlled faults through voltage, clock, electromagnetic or optical techniques to uncover weaknesses that let attackers bypass protections. It operates as an accredited EMVCo security laboratory for all products under the Software Based Mobile Payment (SBMP) programme, covering software protection tools, trusted execution environments, consumer device cardholder verification, OEM payment solutions and host card emulation, and the PCI Security Standards Council lists its Delft lab as a recognised laboratory for the SPoC, CPoC and MPoC mobile payment programmes, though not for PTS device evaluation. Keysight is a NYSE-listed test and measurement company headquartered in Santa Rosa, California.

Best for: Payment device, terminal and mobile payment vendors needing accredited EMVCo or PCI security evaluation of hardware and secure elements

Pros

  • Accredited EMVCo laboratory for all products under the SBMP programme, per Keysight's own certification pages
  • PCI MPoC certification services alongside EMVCo, so mobile payment vendors can cover both under one lab
  • Deep hardware attack capability (side-channel, fault injection) inherited from Riscure, a recognised specialist in the field

Things to check

  • A business unit inside a large NYSE-listed conglomerate rather than a dedicated payment security firm
  • Riscure branding and URLs are in transition following the acquisition, so links and product names may move
  • Positioned as evaluation and certification rather than ongoing threat intelligence

Reported in public reviews and vendor documentation. See sources below.

Key Features

Side-channel analysis and fault injection against chips and embedded devices
EMVCo Software Based Mobile Payment (SBMP) accredited laboratory evaluations
PCI MPoC certification preparation, review and certification
Smart card and secure element security evaluation
Pre-silicon design security analysis
Embedded security testbench hardware for in-house testing

Do you work at Keysight (Riscure Device Security)? to confirm the details or send us a correction.

Add the Cyber Vendor Guide badge to your site

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Spot an error, or do you represent Keysight (Riscure Device Security)? Request a correction.

Key facts

Pricing
Not published; laboratory and certification services scoped per engagement.
Model
Project-based engagements
Visit website

Where Keysight (Riscure Device Security) appears

Guides

Certifications

PCI Recognized Laboratory (SPoC, CPoC, MPoC), EMVCo accredited security laboratory (SBMP)