Data brain
Security Certifications Explorer
Every FIPS 140-3 and FIPS 140-2 cryptographic module validation from the NIST CMVP and every Common Criteria certificate in one place: vendor and product, security level or EAL, status, validity and sunset dates, the evaluation lab, the algorithms a module implements (including post-quantum ones such as ML-KEM and ML-DSA), the certificates it builds on, and the CVEs that may affect it.
The data comes from sec-certs.org, built by the CRoCS lab at Masaryk University from NIST CMVP and the Common Criteria Portal, and is refreshed weekly. Ask it from Claude, ChatGPT, or any MCP assistant, with no setup.
5,542 FIPS 140-3 / 140-2 certificates - 6,833 Common Criteria certificates - synced October 15, 2026
Certified products that may be affected by CVE-2017-6737
- Cisco Catalyst 4500 Series Wired Access Switches running IOS-XE 3.10archived44 related CVEsCisco Systems, Inc. - Common Criteria CCEVS-VR-10906-2018 - certified November 29, 2018
- Cisco Catalyst 3K/4K Wired Access Switches running IOS-XE 3.8.0Earchived97 related CVEsCisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10688-2016 - certified March 9, 2016
- Cisco Aggregation Services Router (ASR) 1000 Series, IOS XE 3.13archived126 related CVEsCisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10609-2015 - certified June 11, 2015
- Cisco Integrated Services Router 4400 Series (ISR-4400), IOS XE 3.13.0archived105 related CVEsCisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10600-2015 - certified February 12, 2015
- Cisco Catalyst 3650, 3850, 4500E (Sup7E, Sup7LE, Sup8E), 4500X, 4500XF running IOS-XE 3.6.1Sarchived60 related CVEsCisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10607-2014 - certified December 30, 2014
- Cisco Catalyst 3850 Series Switches running IOS-XE 3.6.0E and Catalyst 6500 Series Switches running IOS 15.1(2)SY3archived91 related CVEsCisco Systems, Inc. - Common Criteria NSCIB-CC-14-39582-CR - EAL3 - certified November 27, 2014
- Cisco Integrated Services Routers Series (ISR-4400), IOS XE 3.10.2tSarchived110 related CVEsCisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10553-2014 - certified November 10, 2014
- Cisco Catalyst 4500 Series switches (4503-E, 4506-E, 4507R+E, 4510R+E, 4500X and 4500X-F) running IOS-XE 3.5.2Earchived87 related CVEsCisco Systems, Inc. - Common Criteria CRP276 - certified April 30, 2014
- Cisco Aggregation Services Router (ASR) 1000 Series running IOS XE version 2.4.2tarchived54 related CVEsCisco Systems, Inc. - Common Criteria CCEVS-VR-10361-2011 - EAL4+ - certified June 27, 2011
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal. Related CVEs are automated matches by sec-certs and may be incomplete or wrong.
Guides and use cases
- Which certified products are affected by a CVE? FIPS 140-3 and Common Criteria exposure with AI
A certificate says a product passed an evaluation, not that it is free of vulnerabilities. This use case shows how to find the certified products a CVE may affect, and the CVEs that may affect a certified product, inside Claude or ChatGPT.
- Check FIPS 140-3 and Common Criteria status before you buy, from your AI assistant
Procurement questionnaires ask for FIPS 140-3 and Common Criteria proof. This use case shows how to verify a vendor claim in seconds, including status, level, validity dates and sunset, from Claude or ChatGPT.
- Find FIPS 140-3 validated modules with post-quantum cryptography (ML-KEM, ML-DSA)
Post-quantum migration starts with knowing what is available. This use case shows how to find certified cryptographic modules that support ML-KEM, ML-DSA and other post-quantum algorithms, from Claude or ChatGPT.
- How to check a FIPS 140-3 or Common Criteria certificate in Claude or ChatGPT
AI assistants do not know which certificates are active today and will guess. Connect the KBrain Security Certifications brain and they answer from the public certification records instead.
- FIPS 140-3 vs Common Criteria: security levels, EALs and what each certification proves
FIPS 140-3 and Common Criteria are the two certifications security buyers ask for most. This guide compares what each one covers, how FIPS 140-3 security levels and Common Criteria EALs work, and what neither of them proves.
- What is the CMVP? How FIPS 140-3 validation works, from CAVP to certificate
Every FIPS 140-3 certificate comes out of the CMVP. This guide explains who runs it, how a module goes from algorithm testing to a certificate, what the four security levels require, and what active, historical and revoked mean.
- Common Criteria EAL levels explained: EAL1 to EAL7, augmentations and protection profiles
An EAL tells you how deeply a product's security claims were evaluated, not how strong they are. This guide walks through the seven levels, augmentations such as ALC_FLR and AVA_VAN.5, protection profiles and the national schemes that issue certificates.
- Security certifications MCP server: FIPS 140-3 and Common Criteria data for AI agents
Security agents need certification data as tools, not as PDFs. KBrain hosts an MCP server for FIPS 140-3 and Common Criteria certificates, joined with the CVE brain, so any MCP compatible assistant or agent can query it.