pi3g vs Bureau Veritas
pi3g
pi3g GmbH & Co. KG is a Leipzig-based firm with 16+ years building IoT devices, with a focus on embedded Linux. For pi3g the Cyber Resilience Act is an essential upcoming part of CE certification, and they help small and medium manufacturers of connected devices, firmware, and software components understand and meet its requirements. The service spans a fixed-price readiness assessment, hands-on engineering implementation support, and a full compliance package backed by legal-partner review and a single point of contact.
Pros
- Genuine hardware/embedded background — pi3g's core business is European Raspberry Pi distribution and IoT development, so CRA advice comes from people who build the products
- Combines technical engineering implementation with compliance, not just paper-based consulting
- Legal review via partners adds an attestation layer beyond pure engineering
- Free initial consultation and fixed-price readiness assessment reduce engagement risk
Cons
- Consulting and engineering engagements with no public pricing (custom quotes only)
- Deliberately narrow scope: embedded Linux, firmware, and IoT/SME software (not Android/iOS apps, SAP/ABAP, or Windows embedded)
- Primarily a German/EU-market practice; not a notified or conformity-assessment body
Pricing: Free initial consultation; fixed-price readiness assessment; custom engineering engagements
Bureau Veritas
Bureau Veritas is an 1828-founded testing, inspection, and certification group. Its Bureau Veritas Cybersecurity division (built around the acquired specialist Secura) maps CRA requirements to existing standards and delivers end-to-end compliance, from gap assessment to penetration testing and conformity advisory. Its consumer-products and certification arms run accredited RED cybersecurity testing and CE-marking support across labs in Germany, France, China, and Taiwan.
Pros
- Combines a 300+ specialist cybersecurity team (ex-Secura) with large TIC certification infrastructure
- Accredited for RED certification with multi-region radio and cybersecurity testing labs
- Recognized certification routes: IECEE for IEC 62443, Common Criteria under NSCIB/EU CC
- 50+ end-to-end cybersecurity, compliance, and training services
Cons
- Large global TIC group — engagements skew enterprise and formal
- No public pricing
- Offering split across multiple Bureau Veritas entities, which can complicate scoping
Pricing: Custom (contact sales)