Evertrust is pleased to announce that its PKI platform (also known as Stream) version 1.3.0 has received ANSSI CSPN (Certification de Sécurité de Premier Niveau) certification under reference ANSSI-CSPN-2025/10.
The certification was issued by France's National Agency for Information Systems Security (ANSSI) following comprehensive security evaluation by accredited facility AMOSSYS.
The CSPN certification process involved rigorous security testing over several months, including vulnerability analysis and penetration testing by independent security experts. The evaluation assessed Evertrust PKI's ability to resist moderate-level attacks while maintaining operational functionality.
Key security functions validated during the evaluation included:
Secure communications protocols
Authentication and access control mechanisms
Security event logging and monitoring
Data protection capabilities
Cryptographic functions and random number generation
The evaluation was conducted using a test environment including database and HSM integration for cryptographic key management.
You can find all information relevant to the certification here.
Evertrust PKI - Stream - operates as a comprehensive certificate authority platform capable of hosting multiple certificate authorities within a single installation. The platform integrates with Hardware Security Modules (HSM) and supports various keystores including software, PKCS#11 HSMs, and cloud key management services from AWS, Azure, and Google Cloud Platform.
It also provides certificate lifecycle management including issuance, revocation, and Certificate Revocation List (CRL) generation and distribution through HTTP endpoints, LDAP directories, and S3 storage systems.
The CSPN certification enables Stream deployment in environments requiring validated cybersecurity solutions, particularly within French public sector procurement processes and critical infrastructure sectors including energy, telecommunications, and transportation.
Founded in 2017, Evertrust develops PKI and certificate lifecycle management solutions. The company is headquartered in Paris and serves organizations across multiple sectors including financial services, healthcare, government, energy, defense, retail and critical infrastructure.
Evertrust's product portfolio includes Stream (PKI platform) and Horizon (certificate lifecycle management), designed to provide comprehensive digital certificate management capabilities for on-premises, cloud, and hybrid deployments.
