Data brain
Security Certifications Explorer
Every FIPS 140-3 and FIPS 140-2 cryptographic module validation from the NIST CMVP and every Common Criteria certificate in one place: vendor and product, security level or EAL, status, validity and sunset dates, the evaluation lab, the algorithms a module implements (including post-quantum ones such as ML-KEM and ML-DSA), the certificates it builds on, and the CVEs that may affect it.
The data comes from sec-certs.org, built by the CRoCS lab at Masaryk University from NIST CMVP and the Common Criteria Portal, and is refreshed weekly. Ask it from Claude, ChatGPT, or any MCP assistant, with no setup.
5,542 FIPS 140-3 / 140-2 certificates - 6,833 Common Criteria certificates - synced October 15, 2026
Certified products that may be affected by CVE-2013-1235
- Cisco Systems 2504, 5520, 8510 and 8540 Wireless LAN Controllershistorical1 related CVECisco Systems, Inc. - FIPS 140 #3098 - FIPS 140-2 - Level 1 - certified January 2, 2018
- Cisco Systems 2504, 7500, 8510 Wireless LAN Controllers and Cisco Catalyst 6807-XL Switch with Wireless Services Module-2 (WiSM2)historical3 related CVEsCisco Systems, Inc. - FIPS 140 #2497 - FIPS 140-2 - Level 1 - certified December 16, 2015
- Cisco 4402 and 4404 Wireless LAN Controllershistorical1 related CVECisco Systems, Inc. - FIPS 140 #1853 - FIPS 140-2 - Level 2 - certified November 29, 2012
- Cisco 4402 and 4404 Wireless LAN Controllershistorical1 related CVECisco Systems, Inc. - FIPS 140 #1435 - FIPS 140-2 - Level 2 - certified November 2, 2010
- Cisco 4402 and 4404 Wireless LAN Controllershistorical1 related CVECisco Systems, Inc. - FIPS 140 #1213 - FIPS 140-2 - Level 2 - certified October 19, 2009
- Cisco Unified Wireless Network Solution composed of the following components: Cisco Aironet 1130, 1230, and 1240 AG Series Access Points; Cisco 4400 Series Wireless LAN Controllers; Cisco Catalyst 6500 Series Wireless Integrated Services Module (WiSM); Cisco Wireless Control System (WCS); Cisco Secure Access Control Server (ACS); Cisco 2710 Wireless Locationarchived8 related CVEsCisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10324-2009 - EAL2+ - certified March 25, 2009
- Cisco 4402 and 4404 Wireless LAN Controllershistorical1 related CVECisco Systems, Inc. - FIPS 140 #955 - FIPS 140-2 - Level 2 - certified June 5, 2008
- Cisco 4402 and 4404 Wireless LAN Controllershistorical1 related CVECisco Systems, Inc. - FIPS 140 #693 - FIPS 140-2 - Level 2 - certified July 20, 2006
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal. Related CVEs are automated matches by sec-certs and may be incomplete or wrong.
Guides and use cases
- Which certified products are affected by a CVE? FIPS 140-3 and Common Criteria exposure with AI
A certificate says a product passed an evaluation, not that it is free of vulnerabilities. This use case shows how to find the certified products a CVE may affect, and the CVEs that may affect a certified product, inside Claude or ChatGPT.
- Check FIPS 140-3 and Common Criteria status before you buy, from your AI assistant
Procurement questionnaires ask for FIPS 140-3 and Common Criteria proof. This use case shows how to verify a vendor claim in seconds, including status, level, validity dates and sunset, from Claude or ChatGPT.
- Find FIPS 140-3 validated modules with post-quantum cryptography (ML-KEM, ML-DSA)
Post-quantum migration starts with knowing what is available. This use case shows how to find certified cryptographic modules that support ML-KEM, ML-DSA and other post-quantum algorithms, from Claude or ChatGPT.
- How to check a FIPS 140-3 or Common Criteria certificate in Claude or ChatGPT
AI assistants do not know which certificates are active today and will guess. Connect the KBrain Security Certifications brain and they answer from the public certification records instead.
- FIPS 140-3 vs Common Criteria: security levels, EALs and what each certification proves
FIPS 140-3 and Common Criteria are the two certifications security buyers ask for most. This guide compares what each one covers, how FIPS 140-3 security levels and Common Criteria EALs work, and what neither of them proves.
- What is the CMVP? How FIPS 140-3 validation works, from CAVP to certificate
Every FIPS 140-3 certificate comes out of the CMVP. This guide explains who runs it, how a module goes from algorithm testing to a certificate, what the four security levels require, and what active, historical and revoked mean.
- Common Criteria EAL levels explained: EAL1 to EAL7, augmentations and protection profiles
An EAL tells you how deeply a product's security claims were evaluated, not how strong they are. This guide walks through the seven levels, augmentations such as ALC_FLR and AVA_VAN.5, protection profiles and the national schemes that issue certificates.
- Security certifications MCP server: FIPS 140-3 and Common Criteria data for AI agents
Security agents need certification data as tools, not as PDFs. KBrain hosts an MCP server for FIPS 140-3 and Common Criteria certificates, joined with the CVE brain, so any MCP compatible assistant or agent can query it.