DEKRA vs SGS
DEKRA
DEKRA is the world's largest non-listed testing, inspection, and certification body, with a product-cybersecurity practice covering the full product lifecycle. It provides CRA readiness strategy, training, and turnkey projects, plus evaluation services mapped to harmonized and draft standards. DEKRA is an accredited ITSEF and Certification Body for the EUCC scheme and is set to become a CRA Notified Conformity Assessment Body, with notification beginning June 2026.
Pros
- Accredited EUCC ITSEF and Certification Body, directly relevant to CRA higher-assurance routes
- Prior Notified Body experience under the RED Delegated Act
- Broad scheme coverage: EUCC, Common Criteria, FIPS 140-3, SESIP, IEC 62443, EN 18031, MDSCERT
- World's largest non-listed inspection body (~48,000 employees) with dedicated cybersecurity labs
Cons
- CRA Notified-Body notification only begins June 2026 — formal CRA conformity certificates not issuable before then
- Large enterprise TIC firm with formal, certification-led engagements
- No public pricing
Pricing: Custom (contact sales)
SGS
SGS is the world's largest testing, inspection, and certification company. Its cybersecurity arm, SGS Brightsight, runs accredited security-evaluation laboratories (including a facility in Graz, Austria) that assess digital products against CRA requirements and RED cybersecurity standards. SGS develops tailored CRA service packages and operates a Notified Body that can issue EU type certificates for RED Article 3(3) using EN 18031.
Pros
- Massive global scale (~99,500 employees; ~2,500 labs/offices in 115 countries)
- Brightsight is a top-tier security-evaluation lab with deep Common Criteria and high-assurance expertise
- Notified Body able to issue EU type certificates for RED cybersecurity (EN 18031)
- Accreditations including ISO/IEC 17025, plus IEC 62443 and EN 18031 capability
Cons
- Large enterprise TIC firm — formal certification-led engagements, less suited to small or early-stage manufacturers
- No public pricing
- Evaluation/certification focus rather than ongoing in-house remediation engineering
Pricing: Custom (contact sales)