Payment Device Security Testing: 8 companies compared
Companies that security-test and evaluate payment devices: PCI PTS POI and HSM evaluation laboratories, EMVCo terminal testing, and payment-device penetration testing. From PCI Recognized evaluation labs to offensive security-research…
Quick comparison
All payment device security testing companies side by side, alphabetical.
| company | Founded | Engagement | Specialism | Standards / accreditations |
|---|---|---|---|---|
| Applus+ Laboratories | — | Project-based engagements | Manufacturers needing PCI PTS POI/HSM evaluation alongside EMVCo and Common Criteria | PCI Recognized Laboratory (PTS POI/HSM)EMVCoCommon Criteria |
| FIME | — | Project-based engagements | Payment terminal and card makers wanting a payments-focused testing and certification par… | PCI PTSEMVCo (Level 1 & 2) |
| Intertek | — | Project-based engagements | Manufacturers needing PCI PTS and payment scheme security testing from a global TIC firm | PCI PTSSPoC/CPoC |
| PCA Cyber Security | 2019 | Project-based engagements | Payment-device makers and operators wanting offensive, real-world security testing of ter… | — |
| SERMA Safety & Security | — | Project-based engagements | Manufacturers needing PCI PTS and payment-acceptance device evaluation from an accredited… | PCI Recognized Laboratory (PTS)EMVCoCommon Criteria |
| SGS Brightsight | — | Project-based engagements | Payment terminal and HSM manufacturers needing formal PCI PTS, EMVCo or Common Criteria e… | PCI Recognized Laboratory (PTS POI/HSM)EMVCoCommon Criteria |
| SRC Security Research & Consulting | — | Project-based engagements | Manufacturers needing PCI PTS plus German DK/OSeC/JTEMS terminal evaluation | PCI Recognized Laboratory (PTS) |
| UL Solutions | — | Project-based engagements | Manufacturers needing PCI PTS and EMVCo evaluation from a large, globally accredited lab | PCI Recognized Laboratory (PTS POI/HSM)EMVCo |
Applus+ Laboratories
Payment Device Security TestingManufacturers needing PCI PTS POI/HSM evaluation alongside EMVCo and Common Criteria
Applus+ Laboratories is a security evaluation lab that validates payment terminals and HSMs against PCI PTS and also evaluates smart terminals and MPoC solutions. It is a PCI Recognized Laboratory and an accredited EMVCo and Common Criteria lab, headquartered near Barcelona, Spain.
FIME
Payment Device Security TestingPayment terminal and card makers wanting a payments-focused testing and certification partner
FIME is a specialist payment and connected-device testing and certification provider. It runs functional, security and durability testing for payment terminals and cards, accredited by the major payment schemes and for PCI PTS and EMVCo (Level 1 and 2). FIME acquired CETECOM US payment activities in 2020 and operates labs across Europe, the Americas and Asia.
Intertek
Payment Device Security TestingManufacturers needing PCI PTS and payment scheme security testing from a global TIC firm
Intertek, through its EWA-Canada lab, is an accredited security-testing lab for payment systems including PIN entry devices, encrypting PIN pads, unattended payment terminals, smart cards and HSMs. It is accredited by Visa, Mastercard, JCB and Interac and performs PCI PTS and SPoC/CPoC evaluations.
PCA Cyber Security
Payment Device Security TestingPayment-device makers and operators wanting offensive, real-world security testing of terminals beyond baseline PCI PTS certification
PCA Cyber Security is a Munich-based penetration-testing and security-research firm with a dedicated payment-device practice. It performs real-world security testing of payment terminals, PIN pads, unattended and self-service terminals, and fuel-pump and EV-charging payment systems, testing beyond PCI PTS certification to find vulnerabilities even in approved devices. PCA became a PCI SSC Associate Participating Organisation in 2026 and also runs a strong automotive and embedded security practice.
SERMA Safety & Security
Payment Device Security TestingManufacturers needing PCI PTS and payment-acceptance device evaluation from an accredited European lab
SERMA Safety & Security is a French ITSEF/CESTI evaluation lab that assesses security products from chip to full system, evaluating more than 200 products a year. It is a PCI Recognized Laboratory for PTS and payment acceptance devices and is accredited for EMVCo and Common Criteria. Headquartered near Bordeaux, France.
SGS Brightsight
Payment Device Security TestingPayment terminal and HSM manufacturers needing formal PCI PTS, EMVCo or Common Criteria evaluation
Brightsight, part of SGS, is one of the largest security evaluation laboratories for payment and chip technology. It is a PCI Recognized Laboratory for the PTS, SPoC, CPoC, MPoC and SDK programs and an accredited EMVCo and Common Criteria lab, having completed hundreds of PCI PTS device approvals for terminal and HSM makers worldwide. Headquartered in Delft, Netherlands.
SRC Security Research & Consulting
Payment Device Security TestingManufacturers needing PCI PTS plus German DK/OSeC/JTEMS terminal evaluation
SRC Security Research & Consulting is a German PCI Recognized test lab performing PCI PTS device evaluations alongside German DK, OSeC and JTEMS payment terminal evaluations. Headquartered in Bonn, Germany.
UL Solutions
Payment Device Security TestingManufacturers needing PCI PTS and EMVCo evaluation from a large, globally accredited lab
UL Solutions is a global testing, inspection and certification firm with a major payment-device security practice. It is a PCI Recognized Laboratory for PTS POI and HSM evaluation and an EMVCo type-approval lab, and states it has supported approval of over a thousand payment terminals since the PTS program began. Headquartered in Northbrook, Illinois.
Related guides
Other categories you might be evaluating alongside payment device security testing.
About this listing
Payment Device Security Testing companies, listed alphabetically and compared on public information. How we work →