Data brain
Security Certifications Explorer
Every FIPS 140-3 and FIPS 140-2 cryptographic module validation from the NIST CMVP and every Common Criteria certificate in one place: vendor and product, security level or EAL, status, validity and sunset dates, the evaluation lab, the algorithms a module implements (including post-quantum ones such as ML-KEM and ML-DSA), the certificates it builds on, and the CVEs that may affect it.
The data comes from sec-certs.org, built by the CRoCS lab at Masaryk University from NIST CMVP and the Common Criteria Portal, and is refreshed weekly. Ask it from Claude, ChatGPT, or any MCP assistant, with no setup.
5,542 FIPS 140-3 / 140-2 certificates - 6,833 Common Criteria certificates - synced October 15, 2026
Certified products that may be affected by CVE-2015-8597
- Blue Coat ProxySG S400 and S500 running SGOS v6.5archived2 related CVEsBlue Coat Systems, Inc. - Common Criteria CSEC2014004 - certified March 6, 2015
- ProxySG S400-20 [1], S400-30 [2] and S400-40 [3]historical2 related CVEsBlue Coat® Systems, Inc. - FIPS 140 #2256 - FIPS 140-2 - Level 2 - certified September 22, 2014
- ProxySG S500-10 [1] and S500-20 [2]historical2 related CVEsBlue Coat® Systems, Inc. - FIPS 140 #2257 - FIPS 140-2 - Level 2 - certified September 22, 2014
- Blue Coat ProxySG SG600, SG900, SG9000 running SGOS v6.5archived2 related CVEsBlue Coat Systems, Inc. - Common Criteria 383-4-268 - certified September 8, 2014
- ProxySG SG900-10B [1], SG900-20 [2], SG900-30 [3], SG900-45 [4] and SG900-55 [5]historical2 related CVEsBlue Coat® Systems, Inc. - FIPS 140 #2195 - FIPS 140-2 - Level 2 - certified June 27, 2014
- ProxySG SG600-10 [1], SG600-20 [2] and SG600-35 [3]historical2 related CVEsBlue Coat® Systems, Inc. - FIPS 140 #2196 - FIPS 140-2 - Level 2 - certified June 27, 2014
- ProxySG SG9000-20 [1], SG9000-20B [2], SG9000-30 [3] and SG9000-40 [4]historical2 related CVEsBlue Coat® Systems, Inc. - FIPS 140 #2197 - FIPS 140-2 - Level 2 - certified June 27, 2014
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal. Related CVEs are automated matches by sec-certs and may be incomplete or wrong.
Guides and use cases
- Which certified products are affected by a CVE? FIPS 140-3 and Common Criteria exposure with AI
A certificate says a product passed an evaluation, not that it is free of vulnerabilities. This use case shows how to find the certified products a CVE may affect, and the CVEs that may affect a certified product, inside Claude or ChatGPT.
- Check FIPS 140-3 and Common Criteria status before you buy, from your AI assistant
Procurement questionnaires ask for FIPS 140-3 and Common Criteria proof. This use case shows how to verify a vendor claim in seconds, including status, level, validity dates and sunset, from Claude or ChatGPT.
- Find FIPS 140-3 validated modules with post-quantum cryptography (ML-KEM, ML-DSA)
Post-quantum migration starts with knowing what is available. This use case shows how to find certified cryptographic modules that support ML-KEM, ML-DSA and other post-quantum algorithms, from Claude or ChatGPT.
- How to check a FIPS 140-3 or Common Criteria certificate in Claude or ChatGPT
AI assistants do not know which certificates are active today and will guess. Connect the KBrain Security Certifications brain and they answer from the public certification records instead.
- FIPS 140-3 vs Common Criteria: security levels, EALs and what each certification proves
FIPS 140-3 and Common Criteria are the two certifications security buyers ask for most. This guide compares what each one covers, how FIPS 140-3 security levels and Common Criteria EALs work, and what neither of them proves.
- What is the CMVP? How FIPS 140-3 validation works, from CAVP to certificate
Every FIPS 140-3 certificate comes out of the CMVP. This guide explains who runs it, how a module goes from algorithm testing to a certificate, what the four security levels require, and what active, historical and revoked mean.
- Common Criteria EAL levels explained: EAL1 to EAL7, augmentations and protection profiles
An EAL tells you how deeply a product's security claims were evaluated, not how strong they are. This guide walks through the seven levels, augmentations such as ALC_FLR and AVA_VAN.5, protection profiles and the national schemes that issue certificates.
- Security certifications MCP server: FIPS 140-3 and Common Criteria data for AI agents
Security agents need certification data as tools, not as PDFs. KBrain hosts an MCP server for FIPS 140-3 and Common Criteria certificates, joined with the CVE brain, so any MCP compatible assistant or agent can query it.