App shielding

Promon achieves EMVCo SBMP Certification

Following a successful EMVCo Software-Based Mobile Payment (SBMP) Evaluation, Promon’s App Shielding technology achieves EMVCo SBMP certification.

Supported by banks, merchants, processors, vendors, and other industry stakeholders, EMVCo is a global technical body that facilitates worldwide interoperability and acceptance of secure payment transactions. Following a successful EMVCo Software-Based Mobile Payment (SBMP) Evaluation conducted by Riscure’s Security Evaluation Lab, Promon’s App Shielding technology has achieved certification.

“We are extremely proud to have achieved EMVCo SBMP certification. App security is what we do best, and this stamp of approval from Riscure, whose penetration testing capabilities and industry expertise are second to none, further solidifies our position as one of the leading app security solutions on the market”, said Tom Lysemose Hansen, Promon CTO.

Added security robustness and reduced time to market

The SBMP evaluation process is a dedicated approach to evaluating mobile payment solutions based on industry best practices. The standard can be applied to a variety of mobile payment solutions, including Host Card Emulation (HCE) SDKs, HCE Wallets, Trusted Execution Environments (TEE), CDCVMs and Software Protection Tools.

Selecting an EMVCo certified app shielding solution ensures that mobile apps can withstand real-life threats and attacks, as well as speed up SBMP certification processes. As part of Riscure’s evaluation process, Promon’s code protection mechanisms were tested against expert-level attacks.

“Having a strong presence in the mobile banking industry, Promon is now also able to add value through their code protections to other mobile payment solutions, including Tap-to-Phone, SPoC, CPoC, and mobile authentication apps”, said Tim Hartog, Director Mobile Payment at Riscure.

Meeting the ever-changing regulations surrounding compliance is essential for mobile payment solution vendors, and this certification means that developers utilising Promon’s industry-leading software can work with confidence, knowing that their apps are receiving the highest standard of protection.

“Additionally, by implementing an already-EMVCO-certified app shielding solution, the app’s overall time to market is also significantly reduced”, said Tom Lysemose Hansen, Promon CTO.

Three main reasons why mobile payment apps need to get EMVCo certified

There are several reasons why mobile payment app providers need to get an EMVCo Software-Based Mobile Payment (SBMP) certification. The evaluation process for software-based payment solutions ensures a thorough security assessment and acceptance from several of the world’s largest card
brands. In our latest paper created with Riscure, you can read more about the three main reasons why mobile payment apps need to get EMVCo certified
and the benefits of EMVCo SBMP certified Software Protection Tool solutions.