SGS

World-leading testing and certification company that, through SGS Brightsight, provides CRA and RED security evaluation, conformity assessment, and notified-body services.

CompanyCyber Resilience Act Compliance

Pricing: Custom (contact sales)

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed June 2026 · How we review listings

What is SGS?

SGS is the world's largest testing, inspection, and certification company. Its cybersecurity arm, SGS Brightsight, runs accredited security-evaluation laboratories (including a facility in Graz, Austria) that assess digital products against CRA requirements and RED cybersecurity standards. SGS develops tailored CRA service packages and operates a Notified Body that can issue EU type certificates for RED Article 3(3) using EN 18031.

Best for: Manufacturers of higher-assurance digital products (chips, secure elements, payment, embedded) needing lab evaluation and EU type certification

Pros

Massive global scale (~99,500 employees; ~2,500 labs/offices in 115 countries)
Brightsight is a top-tier security-evaluation lab with deep Common Criteria and high-assurance expertise
Notified Body able to issue EU type certificates for RED cybersecurity (EN 18031)
Accreditations including ISO/IEC 17025, plus IEC 62443 and EN 18031 capability

Things to check

Large enterprise TIC firm — formal certification-led engagements, less suited to small or early-stage manufacturers
No public pricing
Evaluation/certification focus rather than ongoing in-house remediation engineering

Reported in public reviews and vendor documentation. See sources below.