DEKRA vs Bureau Veritas
DEKRA
DEKRA is the world's largest non-listed testing, inspection, and certification body, with a product-cybersecurity practice covering the full product lifecycle. It provides CRA readiness strategy, training, and turnkey projects, plus evaluation services mapped to harmonized and draft standards. DEKRA is an accredited ITSEF and Certification Body for the EUCC scheme and is set to become a CRA Notified Conformity Assessment Body, with notification beginning June 2026.
Pros
- Accredited EUCC ITSEF and Certification Body, directly relevant to CRA higher-assurance routes
- Prior Notified Body experience under the RED Delegated Act
- Broad scheme coverage: EUCC, Common Criteria, FIPS 140-3, SESIP, IEC 62443, EN 18031, MDSCERT
- World's largest non-listed inspection body (~48,000 employees) with dedicated cybersecurity labs
Cons
- CRA Notified-Body notification only begins June 2026 — formal CRA conformity certificates not issuable before then
- Large enterprise TIC firm with formal, certification-led engagements
- No public pricing
Pricing: Custom (contact sales)
Bureau Veritas
Bureau Veritas is an 1828-founded testing, inspection, and certification group. Its Bureau Veritas Cybersecurity division (built around the acquired specialist Secura) maps CRA requirements to existing standards and delivers end-to-end compliance, from gap assessment to penetration testing and conformity advisory. Its consumer-products and certification arms run accredited RED cybersecurity testing and CE-marking support across labs in Germany, France, China, and Taiwan.
Pros
- Combines a 300+ specialist cybersecurity team (ex-Secura) with large TIC certification infrastructure
- Accredited for RED certification with multi-region radio and cybersecurity testing labs
- Recognized certification routes: IECEE for IEC 62443, Common Criteria under NSCIB/EU CC
- 50+ end-to-end cybersecurity, compliance, and training services
Cons
- Large global TIC group — engagements skew enterprise and formal
- No public pricing
- Offering split across multiple Bureau Veritas entities, which can complicate scoping
Pricing: Custom (contact sales)