Brightsight authorized to perform eSecCPACE security evaluations

08.09.2026 09:41 AM
Brightsight is pleased to announce that its Meyreuil laboratory has been recognized by PayCert as an authorized evaluation laboratory for the ECPC Evaluation of CPACE Application according to the eSecCPACE methodology. 

This milestone enables Brightsight to perform independent security evaluations for CPACE payment applications under the eSecCPACE certification framework. The recognition follows a successful assessment process, further strengthening Brightsight's position as a trusted provider of payment security evaluation services. 

The addition of eSecCPACE further expands Brightsight's portfolio of payment security services, providing customers with access to security evaluation expertise across a broad range of payment and certification schemes.

What is the eSecCPACE Security Framework? 

As digital and contactless payments continue to evolve, robust security evaluation frameworks are essential to maintaining trust in payment technologies.

The European Card Payment Cooperation (ECPC) is the organization responsible for defining, maintaining, and evolving the CPACE ecosystem. CPACE (CPA Contactless Extensions) is a payment specification framework covering payment cards, mobile payment applications, and contactless kernels. 

To ensure implementations meet strict security objectives, ECPC established the eSecCPACE methodology to evaluate CPACE applications on payment cards and secure devices. 

PayCert, acting as the certification body delegated by ECPC, oversees the certification process, authorizes evaluation laboratories, and issues official certificates based on evaluation results.

Benefits of eSecCPACE Security Evaluations with Brightsight 

With this authorization, Brightsight can now support vendors, payment solution providers, secure element developers, and card manufacturers seeking eSecCPACE security evaluations of CPACE applications.

Key advantages for customers include:
  • Global expertise: access to a globally recognized payment security evaluation organization.
  • Specialized testing: advanced penetration testing capabilities, including side-channel analysis and fault injection attacks.
  • End-to-end guidance: direct technical support throughout the entire eSecCPACE evaluation process.

Why choose Brightsight?

The Brightsight laboratory in Meyreuil brings together experienced security evaluators, specialized testing facilities, and the broader technical capabilities of the Brightsight group.

This authorization acknowledges the competence of the local team, the maturity of the lab's methodology, testing infrastructure, and its rigorous quality management processes. 

Rob Kemper

Jeremie Delpech
Location Manager Meyreuil, Brightsight

"I am proud of the work accomplished by our team to achieve this recognition. Becoming an authorized eSecCPACE evaluation laboratory is an important milestone that demonstrates both our technical expertise in payment security and our ability to support emerging certification schemes with the same level of rigor our customers already expect from Brightsight. This recognition enables us to support vendors seeking security evaluations under the eSecCPACE framework and further strengthens our portfolio of payment security evaluation services."

Ready to certify your CPACE application?

Looking for an authorized evaluation laboratory to evaluate your CPACE payment solution against the eSecCPACE security requirements? Contact Brightsight’s security experts today to start your eSecCPACE evaluation process.

Enjoyed this article?

Stay up to date with regulatory developments and evolving global cybersecurity requirements. Subscribe to our newsletter to receive the latest insights, updates, and announcements from Brightsight.

The Brightsight Bulletin

Sign up for the Brightsight Bulletin, our newsletter tailored for companies manufacturing and developing IT security products from across the payment, Internet of Things, medical, automotive, industrial, government, telecommunication and network or integrated circuit sectors.

Get informed about: 

  • The latest cybersecurity news and regulatory developments for your products’ security evaluation and certification;
  • Expert insights;
  • Brightsight activities, including events and webinars.

Whether you're shaping digital strategy, driving innovation, or simply staying informed, our curated content delivers clarity and inspiration straight to your inbox. Brightsight helps you see what’s next—before it happens.

The Brightsight Bulletin

Sign up for the Brightsight Bulletin, our newsletter tailored for companies manufacturing and developing IT security products from across the payment, Internet of Things, medical, automotive, industrial, government, telecommunication and network or integrated circuit sectors.

Get informed about: 

  • The latest cybersecurity news and regulatory developments for your products’ security evaluation and certification;
  • Expert insights;
  • Brightsight activities, including events and webinars.

Whether you're shaping digital strategy, driving innovation, or simply staying informed, our curated content delivers clarity and inspiration straight to your inbox. Brightsight helps you see what’s next—before it happens.