Data brain

Security Certifications Explorer

Every FIPS 140-3 and FIPS 140-2 cryptographic module validation from the NIST CMVP and every Common Criteria certificate in one place: vendor and product, security level or EAL, status, validity and sunset dates, the evaluation lab, the algorithms a module implements (including post-quantum ones such as ML-KEM and ML-DSA), the certificates it builds on, and the CVEs that may affect it.

The data comes from sec-certs.org, built by the CRoCS lab at Masaryk University from NIST CMVP and the Common Criteria Portal, and is refreshed weekly. Ask it from Claude, ChatGPT, or any MCP assistant, with no setup.

5,542 FIPS 140-3 / 140-2 certificates - 6,833 Common Criteria certificates - synced October 15, 2026

Add the certifications brain Connect via MCP

Matching certificates

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal. Related CVEs are automated matches by sec-certs and may be incomplete or wrong.

Guides and use cases

Which certified products are affected by a CVE? FIPS 140-3 and Common Criteria exposure with AI
A certificate says a product passed an evaluation, not that it is free of vulnerabilities. This use case shows how to find the certified products a CVE may affect, and the CVEs that may affect a certified product, inside Claude or ChatGPT.
Check FIPS 140-3 and Common Criteria status before you buy, from your AI assistant
Procurement questionnaires ask for FIPS 140-3 and Common Criteria proof. This use case shows how to verify a vendor claim in seconds, including status, level, validity dates and sunset, from Claude or ChatGPT.
Find FIPS 140-3 validated modules with post-quantum cryptography (ML-KEM, ML-DSA)
Post-quantum migration starts with knowing what is available. This use case shows how to find certified cryptographic modules that support ML-KEM, ML-DSA and other post-quantum algorithms, from Claude or ChatGPT.
How to check a FIPS 140-3 or Common Criteria certificate in Claude or ChatGPT
AI assistants do not know which certificates are active today and will guess. Connect the KBrain Security Certifications brain and they answer from the public certification records instead.
FIPS 140-3 vs Common Criteria: security levels, EALs and what each certification proves
FIPS 140-3 and Common Criteria are the two certifications security buyers ask for most. This guide compares what each one covers, how FIPS 140-3 security levels and Common Criteria EALs work, and what neither of them proves.
What is the CMVP? How FIPS 140-3 validation works, from CAVP to certificate
Every FIPS 140-3 certificate comes out of the CMVP. This guide explains who runs it, how a module goes from algorithm testing to a certificate, what the four security levels require, and what active, historical and revoked mean.
Common Criteria EAL levels explained: EAL1 to EAL7, augmentations and protection profiles
An EAL tells you how deeply a product's security claims were evaluated, not how strong they are. This guide walks through the seven levels, augmentations such as ALC_FLR and AVA_VAN.5, protection profiles and the national schemes that issue certificates.
Security certifications MCP server: FIPS 140-3 and Common Criteria data for AI agents
Security agents need certification data as tools, not as PDFs. KBrain hosts an MCP server for FIPS 140-3 and Common Criteria certificates, joined with the CVE brain, so any MCP compatible assistant or agent can query it.