ProSecCo, the product security maturity model

ProSecCo stands for Product Security and Compliance

With ProSecCo, manufacturers evaluate their product security maturity, understand what they do well, highlight gaps and identify improvements.

cetome received the status of Jeune Entreprise Innovante for our ProSecCo research

ProSecCo product security and compliance

Try ProSecCo

What is ProSecCo?

ProSecCo is a model that evaluates the security maturity of connected products.

With ProSecCo, manufacturers can improve their product security and compliance as follows:

Analyse maturity

Achieve compliance

Improve maturity

Support decision-making

Our free tool is available with limited functionalities.

Try ProSecCo

FAQ

Is ProSecCo open source?

ProSecCo is closed-source. You can acquire a license by contacting us.

How are profiles established?

The profiles represent the expected level of maturity for a domain. They integrate requirements from standards, regulations and sector-specific practices.

How is the maturity score evaluated?

The maturity score depends on the answers! The score is calculated using a proprietary algorithm that removes most biases. This is the result of several months of research.

How much does ProSecCo premium cost?

ProSecCo premium is available to cetome customers. The price depends on the features needed such as a custom profile, internal mappings, etc. Please contact us to get more information.

About cetome

cetome is an independent cyber advisory with a recognised expertise in IoT security. We work with IoT manufacturers to embed security-by-design in their products, train their teams and improve their cyber resilience. This includes the development of accessible and usable vulnerability disclosure policies.

About the Author

Dr. Cédric LÉVY-BENCHETON is the CEO and founder of cetome. Cédric has expertise in IoT security. He previously worked at ENISA, the European Union Cyber Security Agency.