Veridas wins high-level certification for injection-attack defense

Veridas said it has become one of the first companies worldwide to earn CEN/TS 18099 with a High Level of Assurance, a certification that tests whether identity systems can resist injection attacks. The result could matter for firms preparing for Europe’s anti-money-laundering rules due in July 2027.

Why it matters: - Injection attacks are an escalating fraud method in which an attacker bypasses the camera and manipulates the data stream directly. - The CEN/TS 18099 High Level of Assurance is tied to compliance with ETSI TS 119 461 v2.1.1 and the European Anti-Money Laundering Regulation, which becomes mandatory on July 10, 2027. - Identity providers and trust service providers serving banking, crypto, insurance and gaming sectors may need certified anti-injection technology to stay compliant.

What happened: - Veridas said it has become one of the first companies in the world to obtain CEN/TS 18099 certification at High Level of Assurance. - The company said it launched its advanced injection-attack detection solution in early 2025. - CLR Labs audited Veridas and certified its ability to block injection attacks. - The announcement was made from São Paulo, Brazil, on November 10, 2026.

The details: - CEN/TS 18099 is described as the first official global test methodology built specifically to evaluate resistance to injection attacks. - CLR Labs is described as a pioneering laboratory for the standard. - The lab tested Veridas over several months using multiple injection vectors in a fraud-like environment. - The methodology measures three threat levels: basic, substantial and high. - Reaching the top tier indicates the system can block the most advanced attacks in the market. - Javier San Agustín, Veridas CTO, said the certification followed months of work and years of development. - Alfonso Urrizburu, Veridas CRO, said the certification strengthens the company’s position under the new AMLR framework and supports the technical evidence regulators require, including for web environments.

Between the lines: - The certification gives Veridas a regulatory edge at a time when the market expects few vendors to complete the testing process before AMLR takes effect. - Companies using non-certified KYC platforms may face a compliance gap as Europe tightens anti-money-laundering rules. - Veridas is also leaning on broader market credibility, including its recent inclusion as a Gartner Visionary for a second consecutive year. - The company says this positions it as a trusted partner for financial institutions facing stricter identity-verification requirements.

What's next: - More identity and trust-service vendors are likely to pursue similar certification ahead of the July 2027 AMLR deadline. - Veridas will likely market the certification to regulated sectors that need proof of resistance to injection attacks. - Firms operating identity verification systems will need to assess whether their current KYC stack can meet the new European technical standard in time.

The bottom line: - Veridas is using a rare high-level anti-fraud certification to position itself ahead of Europe’s next wave of identity and AML compliance demands.