Veridas wins high-level CEN/TS 18099 certification against injection attacks

Veridas said it has earned the highest level of CEN/TS 18099 certification for resistance to injection attacks, a benchmark tied to Europe’s incoming anti-money laundering rules. The company says the result strengthens its compliance position ahead of the July 2027 AMLR enforcement date.

Why it matters: - Injection attacks are emerging as a scalable fraud tactic that bypasses the camera and manipulates the data stream directly. - The certification is tied to compliance with ETSI TS 119 461 v2.1.1, which is required under the new European Anti-Money Laundering Regulation. - The AMLR will be strictly enforced on July 10, 2027, raising the stakes for identity providers and Qualified Trust Service Providers serving financial, crypto-asset, insurance and gaming sectors. - Institutions using uncertified identity verification platforms face compliance risk if they cannot meet the new European requirements on time.

What happened: - Veridas said it has achieved CEN/TS 18099 certification at High Level of Assurance, making it one of the first companies worldwide to reach that level. - CLR Labs audited Veridas’ technology and certified its ability to block injection attacks after months of testing. - Veridas launched its injection attack detection solution in early 2025. - The announcement was made in Amsterdam on Nov. 10, 2026.

The details: - CEN/TS 18099 is described as the first official testing methodology designed specifically to evaluate resistance to injection attacks. - CLR Labs replicated a real fraud environment and tested Veridas with multiple injection vectors over several months. - The standard evaluates three threat levels: basic, substantial and high. - Veridas said passing the highest tier shows its system blocks the most advanced attacks in the market. - Javier San Agustín, CTO of Veridas, said the certification reflects months of work and years of developing technology for injection-attack detection. - Alfonso Urrizburu, CRO of Veridas, said the certification strengthens the company’s position under the AMLR framework and supports legal certainty for financial institutions, including in web environments. - Veridas said the certification process takes months of laboratory testing, which could leave few providers ready by the AMLR deadline.

Between the lines: - The certification gives Veridas a technical and regulatory credential at a time when identity verification providers are under pressure to prove resistance to AI-enabled fraud. - The company is using the certification to position itself as a compliance-ready vendor for regulated industries in Europe. - Veridas also pointed to its inclusion as a Visionary in the Gartner Magic Quadrant for the second consecutive year as supporting evidence of its market position.

What's next: - Identity providers and QTSPs serving regulated sectors will need to align with ETSI TS 119 461 v2.1.1 before the July 10, 2027 AMLR enforcement date. - Veridas said the market may see limited provider readiness because certification requires prolonged laboratory testing. - The company will likely use the certification to pursue regulated customers needing documented resistance to injection attacks.

The bottom line: - Veridas now has a high-level European certification that directly supports AMLR compliance and sets a benchmark for defending against injection attacks.