Services

FIPS 140-3

Recently signed into effect by the US Commerce Secretary, FIPS 140-3 replaced FIPS 140-2 and is now in effect.

(NIST SP 800-90B)

Penumbra performs detailed evaluations of cryptographic module entropy sources...

Postal Security

Penumbra is the world leader in postal security systems evaluations and assessments for the world's largest postal entities.

PEN Testing

Our security professionals provide: Network and Web Application PEN Testing, architecture reviews, security assessments & vulnerability analysis.

IT Infrastructure Auditing

As part of their responsibility to support postal security worldwide, Penumbra conduct IT infrastructure audits to BSI, ISO and other required standards

Application Development

Penumbra have developed several security related applications to support specific testing needs and support of the postal authorities

Workshops

Penumbra provides onsite training workshops for their customers in the area of FIPS 140-3 and related standards...

Physical Security Testing

One of the more challenging areas of FIPS 140-2 is meeting the physical security requirements. Mandated for security levels 2 - 4 ...

Consulting

Penumbra provides consulting services to their customers intending to seek FIPS 140-3 or postal conformance.

Cryptographic Algorithms

Penumbra conducts cryptographic algorithm validation testing on behalf of the cryptographic algorithm validation program (CAVP).

FIPS 140-3 vs. 140-2 Gap Analysis

Penumbra will evaluate your FIPS 140-2 product and provide a report that indicates the necessary steps to bring the module into FIPS 140-3 conformance.

Application Testing

Penumbra provides application testing and evaluation services to identify vulnerabilities that put your application at risk.