The VDE provides manufacturers of connected electrical products with in-depth expertise to help them meet complex cybersecurity requirements. We offer support through in-depth technical analysis, standards-compliant testing procedures, structured risk analyses, and comprehensive consulting—ranging from security architecture and vulnerability assessments to complete documentation for market access.
Cybersecurity Testing and Certification at the VDE Institute
What obligations apply to manufacturers and importers?
Connected electronic products are subject to strict legal requirements that manufacturers must comply with. The Radio Equipment Directive (RED), which took effect in August 2025, requires that certain devices with radio and internet connectivity meet information security requirements, and this is also included in the CE declaration. The subsequent EU Cyber Resilience Act (CRA) mandates comprehensive security measures such as risk analyses, vulnerability management, and regular updates, and makes comprehensive cybersecurity a prerequisite for the CE marking of products that communicate electronically. Relevant standards such as IEC/EN 62443, EN 18031 (for the RED 3.3 d, e, f requirements), and EN 303 645 support the implementation of technical security standards. Additionally, manufacturers are liable for security deficiencies, and market surveillance authorities can remove products from the market if their cybersecurity is inadequate.
VDE Testing Services for Safe, Connected Products
Cybersecurity is not only a mark of quality, but also a legal requirement and a key competitive factor. VDE helps you meet the growing demands for IT security reliably, efficiently, and in compliance with standards.
Information About the VDE Testing and Certification Process
The testing and certification process for electrical products follows a structured, standards-based approach from the initial inquiry to successful certification. VDE supports manufacturers through every project phase, including during product development, ensuring regulatory requirements are incorporated early into design, layout, and component selection.
We receive your request for a quote, including a product description, target markets, technical specifications, desired certification marks, etc., through our sales department or the relevant technical department.
We will prepare a customized quotation for you, including a list of standards, a test plan, a timeline, and a cost estimate.
Timeframe: Weeks 0–2
We perform all necessary tests on your product in accordance with your specific order.
Timeframe: Weeks 2-6
During this phase, we begin preparing the first test reports and document any nonconformities with standards, if applicable. Should any arise, you will receive recommendations for improvement. If you wish to make corrections or changes to your product, additional partial tests will be required, which may extend the duration of the entire project.
Our independent certification body evaluates and verifies all test results (completeness check, confirmation of compliance with standards). A certification decision is then made (approval / conditions / rejection).
Timeframe: Weeks 6-7
Upon successful certification, we will issue your certificate, and you will receive the test report and, if applicable, a mark usage agreement. Manufacturers may now affix the certification mark to the product and market it.
Timeframe: Weeks 7-8
How does the VDE help organizations meet cybersecurity requirements?
We help you view cybersecurity not as an obstacle, but as an opportunity. In addition to implementing uniform audit standards, we also offer security audits and certification in the areas of data protection, cybersecurity, and functional safety.
With our testing services, you can ensure that your products:
- meet legal requirements
- are protected against cyberattacks
- build trust with your customers
- remain competitive in the market over the long term
Our information security audits are based on the following regulations and standards:
- VDE-PB-0004 und -0005
- IEC 62443-4-1 und -4-2
- ETSI EN 303 645
- VDE-PB-0033
- EN 18031-1 / 18031-2 / 18031-3
Penetration Testing for Devices, Apps, and Cloud Services
VDE conducts penetration tests in a structured manner and in compliance with standards, documents all vulnerabilities found, and provides specific technical recommendations for securing the systems. The tests are divided into three areas: testing of devices (communication devices and gateways), testing of backend and cloud systems, and testing of apps for smartphones and tablets. In this process, the cybersecurity objectives are tested in the product and system design as well as in the implementation. Documentation for the user and the technical aspects of data protection are integral parts of the test.
Meet our experts at electronica 2026
November 10, 2026 - November 13, 2026 | Munich
Hall A4, booth 238
As the world’s leading trade fair, every two years electronica provides a comprehensive update of the rapidly developing technology in all fields of electronics. Here, leading companies present forward-looking innovations and use the trade fair to expand and maintain their global networks.
You are welcome to schedule a meeting with our VDE experts at the trade show.
Upgrade for your knowledge: our free online seminars
Through our free online seminars, we keep you informed about the latest developments in the testing and certification of electrical equipment and systems. Our experts discuss the latest trends as well as the perennial topics in the world of certification. In doing so, they draw on a wealth of experience gained over 100 years of testing and certification.
Is it all too complex and unclear?
We support both experienced engineering departments and manufacturers who are facing regulatory requirements for the first time.
Even if you have no prior knowledge, the VDE provides clarity on responsibilities, required tests, documentation requirements, and realistic timelines.