CyberPass | Simplifying Product Security Compliance

From Faster Answers to Stronger Proof

Tue, 19 May 2026 05:52:12 -0700

Every security team knows the scene.

A potential customer is interested. The commercial discussion is moving well. Then comes the email: “Please complete our vendor security questionnaire.”

Sometimes it is 80 questions. Sometimes 300. Sometimes it arrives as a spreadsheet, sometimes as a portal, sometimes as a mix of legal, IT, privacy, cloud security, incident management, and compliance requirements. The questions are familiar, but never exactly the same.

For vendors, especially growing technology companies, this has become a hidden tax on growth. Sales teams want speed. Security teams want accuracy. Legal teams want careful wording. Customers want confidence. And everyone wants the questionnaire finished yesterday.

It is no surprise that a new generation of AI-powered platforms is emerging to solve this problem. Their promise is simple and attractive: connect the company’s policies, SOC 2 reports, ISO 27001 documentation, internal knowledge base, and previous questionnaire answers, then use AI to generate consistent, traceable, customer-ready responses.

This is a real improvement. It reduces manual work. It avoids copy-paste errors. It creates consistency. It allows teams to reuse the knowledge they already have.

But it also reveals a deeper question.

The...Read More

From NIS2 to CRA: Where Compliance Meets Continuous Security

Tue, 28 Oct 2025 03:38:04 -0700

Red Alert Labs recently had the pleasure of attending ITSA 2025 in Nuremberg, accompanied by Mathieu Martin from Business France Deutschland, who provided invaluable support throughout the event.
The conference was buzzing with discussions around compliance mandates such as #NIS2 and #DORA, which are driving urgent projects across industries. While these regulations are essential, our conversations revealed a common challenge: organizations are struggling to translate compliance into true cyber resilience.
As David Nosibor highlights in his event recap, the Bundesamt für Sicherheit in der Informationstechnik (BSI) is calling on organizations to accelerate cyber resilience efforts and integrate digitalized security practices into daily operations. Compliance is no longer just about checking boxes; it sets the foundation for continuous security that adapts to evolving threats.
The key insight from ITSA 2025 is that resilience is a living process. It requires organizations to embed regulatory requirements into everyday operations and maintain vigilance beyond audits and certifications. In other words, compliance is the starting point, but true security is achieved through ongoing, practical application.
At Red Alert Labs, we help organizations bridge this gap by translating complex regulations into actionable security practices that enhance both compliance and operational...Read More

Mastering Global IoT Compliance with AI

Wed, 15 Oct 2025 07:40:45 -0700

At the Resilience IoT + Trustworthy AI Conference in London on 30 October 2025, David Nosibor, Head of Business Development for CyberPass at Red Alert Labs, will demonstrate how AI-powered compliance solutions transform complex regulations into a strategic advantage.
Presentation: “Mastering Global IoT Compliance: How AI Simplifies RED & Cyber Resilience Act Obligations”
In his session, David will cover:
Case study insights: Learn about common compliance pitfalls and how AI workflows help avoid them.
Live demo: See an AI assistant parse documentation and map it to the RED directive.
Next-generation compliance: Discover how AI agents can collaborate with engineering, security, and compliance teams to maintain continuous regulatory alignment.
Whether you are a product-security lead, compliance manager, evaluator, or part of a certification body, you will gain practical strategies to stay ahead of CRA obligations and more.
Event Details:
Location: London
Date: 30 October...Read More

Beyond Checklists: How the PSCOPE Maturity Framework Can Turn RED-DA & CRA Compliance into Continuous Operations

Wed, 01 Oct 2025 03:56:03 -0700

Too often, product security compliance is treated as a one-off exercise, a box to tick late in the go-to-market process. It shows up as a last-minute scramble: chasing documents, filling checklists, resubmitting evidence, and negotiating with labs under pressure. For many product teams, security compliance isn’t built into product development, it’s bolted on afterward, seen as a roadblock rather than an enabler.
But the reality has changed. Market needs and requirements have evolved as security compliance for radio connected devices is now mandatory in the EU and other countries, regions are following the EU’s lead. Directives and regulations such as the Radio Equipment Directive Delegated Act (RED-DA) and the Cyber Resilience Act (CRA) aren’t just legal requirements. They safeguard reputation, build trust with end consumers, and ultimately decide which companies can adapt, respond to market demands, and launch products with confidence.
The challenge is clear: while regulatory demands have grown dramatically, the industry’s methods for managing product security compliance haven’t kept up.
While some security compliance teams may have put proper governance processes in place, they far too often still lack the tooling and performance measurement that SDLC teams take for granted. Developers measure velocity, quality, implementation of security parameters and coverage. Security compliance teams? Too often stuck with manual checklists. And IT security-centric GRC platforms in the market don’t address the realities of connected devices.
Modern connected devices also rely on a web of...Read More

Mastering Global IoT Compliance with AI: Insights from Red Alert Labs at the Resilience IoT + Trustworthy AI Conference

Wed, 01 Oct 2025 02:38:20 -0700

Red Alert Labs is excited to announce that our Head of Business Development, David Nosibor, will be presenting at the Resilience IoT + Trustworthy AI Conference in London on 30 October 2025. David will explore how AI-powered compliance solutions are transforming the way organizations approach complex IoT regulations, turning compliance into a strategic advantage.
Presentation: “Mastering Global IoT Compliance: How AI Simplifies RED & Cyber Resilience Act Obligations”
In his session, David will highlight:
Case study insights: Learn about common compliance pitfalls and how AI-driven workflows help organizations avoid them.
Live demo: See an AI assistant in action, parsing regulatory documents and mapping them directly to the RED (Radio Equipment Directive).
Next-generation compliance: Discover how AI agents can collaborate with engineering, security, and compliance teams to maintain continuous regulatory alignment.
This session is ideal for product-security leads, compliance managers, evaluators, and certification bodies, providing practical strategies to navigate the evolving landscape of the Cyber Resilience Act (CRA) and other global IoT regulations.
📍 Location: London
📅 Date: 30 October 2025
🎟️ More info & registration: Resilience IoT + Trustworthy AI Conference
Join us in London to see how AI is redefining IoT compliance, helping organizations stay ahead of regulatory requirements while enhancing operational efficiency.
Read More

Building Digital Trust Through Continuous Compliance: A Guide for IoT Manufacturers

Mon, 04 Aug 2025 23:58:37 -0700

The Digital Trust Imperative
Trust isn't something you can add later—it's the foundational currency that gives the Internet of Things its true value.
Every smart doorbell, connected refrigerator, and wearable health monitor represents not just a technological marvel, but a promise to consumers: "Your data is safe with us." But here's the thing—trust doesn't happen by accident. It's built deliberately, maintained diligently, and easily broken when compliance falls by the wayside.
As an IoT manufacturer, you're not just creating devices; you're creating relationships. And like any good relationship, trust forms the foundation. This is where compliance enters the picture—not as a bureaucratic checkbox exercise, but as the backbone of digital trust. We’re here to explore how continuous compliance isn't just about avoiding penalties; it's about building lasting trust that translates directly to your bottom line.
What Makes Up Digital Trust in IoT?
Digital trust is consumer confidence that extends beyond your product's functionality. It's the belief that your smart devices will not only perform as advertised but will also protect user data, respect privacy boundaries, and maintain security over time.
Digital trust comprises several critical elements: security (protection against threats), privacy (appropriate handling of personal data), reliability (consistent performance), and transparency (clear communication about practices). When these elements come together, consumers feel...Read More

How to Prepare for the Cyber Resilience Act (CRA) in 2025

Thu, 08 May 2025 08:10:24 -0700

You’ve probably seen how compromised devices, vulnerable networks, and privacy breaches have become major plotlines in TV series and movies. Unfortunately, these aren't just fictional scenarios dreamed up by creative, potentially paranoid, scriptwriters for your entertainment; they're based on very real threats that organizations face each day.
The IoT devices market in Europe is on track to hit a staggering US$ 42,756.6 million by 2030. That's not just a big number—it represents millions of consumers who deserve products that won't compromise their security or privacy. Recognizing that the digital vulnerabilities we see in the media mirror actual security incidents, the EU has enacted crucial regulations: the updated Radio Equipment Directive (RED) and theRead More

CyberPass at Quantum Tech Days 2025

Tue, 06 May 2025 04:29:50 -0700

12–13 May | Where: Hotel La Frégate, Saint-Cyr-sur-Mer, France
Theme: “Pioneering Quantum Computing and Post-Quantum Security Solutions”
CyberPass is proud to take part in the upcoming Quantum Tech Days 2025, now in its third edition. This key industry event brings together leaders in cybersecurity and emerging technologies to explore the impacts of quantum computing and the urgent need for post-quantum security.
Set against the backdrop of Saint-Cyr-sur-Mer, the event runs from May 12 to 13 and will feature a series of expert talks, technical insights, and strategic discussions addressing one of the most transformative challenges facing digital security today.
CyberPass on the Main Stage : 13 May
On May 13, David Nosibor, Head of Business Development at CyberPass, will represent the company in a high-level roundtable discussion titled: “The Quantum Threat & How to Prepare”.
He will be joined by:
➡️ C. Moreira
➡️ L. Giraud
➡️ B. Vian, General Manager at SEALSQ
➡️ V. Gomes, CTO Security at EVIDEN
➡️ D. NosiborRead More

Digital Trust Can’t Thrive on Outdated Compliance Foundations — That’s Why We Built CyberPass

Thu, 17 Apr 2025 06:25:52 -0700

At InCyber Forum 2025, I had the chance to share a perspective that’s shaping the future of product cybersecurity assurance:
As connected products flood the market—over 125 billion devices expected by 2030—trust has become the ultimate differentiator. Yet our current approaches to compliance remain fragmented, manual, and increasingly disconnected from the operational realities of the IoT ecosystem.
The Challenge: Compliance Hasn’t Kept Up
The regulatory landscape is evolving rapidly, from the RED Directive (EN 18031) to the Cyber Resilience Act (CRA) and the PSTI Act in the UK. But the processes used by manufacturers, labs, and certification bodies to demonstrate compliance have largely stayed the same.
Manufacturers face siloed, repetitive requests for documentation.
Labs must repeatedly evaluate similar products with no structured reuse.
Certification bodies lack real-time visibility across schemes.
And post-certification? Most products go unmonitored, even as vulnerabilities...Read More

CyberPass Joins Business France’s Booster Impact Germany-Austria 2025!

Thu, 17 Apr 2025 06:22:20 -0700

CyberPass is proud to announce its participation in Business France’s Booster Impact Germany-Austria 2025, an initiative designed to support companies in expanding their presence in these key European markets. This program provides valuable insights, strategic networking opportunities, and tailored guidance for businesses looking to establish themselves in Germany and Austria’s cybersecurity ecosystems.
But before that, check out our video where David Nosibor shares his initial takeaways, highlighting key differences between the German and Austrian markets. Understanding these nuances is crucial as we shape our approach to expanding CyberPass’s reach.
Kick-off Event in Paris – March 19
The journey began with an official launch event in Paris, where CyberPass representatives, including Ali Khalil (Marketing & Communication Director) and David Nosibor (Head of Business Development – CyberPass), engaged with industry experts and market specialists. This session provided an in-depth understanding of the cybersecurity landscapes in Germany and Austria, helping CyberPass refine its market entry strategy.
Next Steps: Düsseldorf – May 6
The next phase of the Booster Impact program will take CyberPass to Düsseldorf on May 6, where the team will continue exploring opportunities, meeting key stakeholders, and deepening its market engagement. This step marks a crucial milestone in CyberPass’s commitment to expanding its footprint in the European cybersecurity sector.
Stay tuned for further updates as CyberPass progresses on this exciting journey toward Germany...Read More