Express Logic Achieves EAL4+ Common Criteria Security Certification for X-Ware IoT Platform Secure Connectivity (SC)

October 16, 2018


Express Logic Achieves EAL4+ Common Criteria Security Certification for X-Ware IoT Platform Secure Connectivity (SC)

Express Logic X-Ware IoT Platform(r) Secure Connectivity has achieved EAL4+ common criteria security certification, increasing IoT and cloud security.

X-Ware IoT Platform Increases Security for Cloud Connectivity

Express Logic announced that thanks to its collaboration with the world’s leading security evaluation lab Brightsight, its X-Ware IoT Platform Secure Connectivity (SC) has become the industry’s first deeply embedded cloud connectivity software platform to achieve EAL4+ common criteria security certification.

This certification ensures that the X-Ware IoT Platform SC meets all of the “Common Criteria” security assurances as administered by the Norwegian National Security Authority (SERTIT). The Common Criteria is an internationally recognized set of standards used by the federal government and other organizations to assess the security assurance of technology products, giving consumers the confidence that products specified at a certain level meet the package of security assurance requirements associated with that level.


X-Ware IoT Platform Secure Connectivity (SC)

X-Ware IoT Platform SC is the subset of X-Ware IoT Platform that pertains to cloud connectivity. It includes the popular ThreadX RTOS with more that 6.2 billion deployments, NetX Duo embedded IPv4 & IPv6 TCP/IP stack, NetX Secure TLS, and NetX MQTT. These are the necessary components for connectivity with the majority of the world’s most popular cloud providers and they are also the subject of this EAL4+ security certification effort. Furthermore, this EAL4+ common criteria certification effort is designed to be generic — not based on any particular microprocessor or cloud provider and therefore portable to virtually any device based on X-Ware IoT Platform SC.

“IoT security is the primary concern of the embedded industry,” said William E. Lamie, President, Express Logic. “Industry analyst firm Gartner predicts that half of all security budgets for IoT will go to fault remediation, recalls, and safety failures rather than protection, creating a massive challenge for embedded IoT developers. Because securing the IoT is technically very difficult, our X-Ware IoT Platform SC EAL4+ common criteria certification is designed to ease the work of securing embedded IoT devices. With this certification, we are making development of secure devices easier, improving time-to-market, and greatly reducing the risk for device manufacturers.”


Safety Plus Increased Cloud-Connectivity Security

Express Logic’s X-Ware IoT Platform SC already touts safe and secure IoT cloud connectivity, having attained the highest level of safety certifications, including IEC 61508 SIL 4 (the highest, most dependable level as determined by IEC), IEC 62304 Class C, ISO 26262 ASIL D, EN 50128 SW-SIL 4, UL 60730-1 Annex H, CSA E60730-1 Annex H, IEC 60730-1 Annex H, IEC 60335-1 Annex R, and IEC 60335-1 Annex R, 1998, as well as TLS/DTLS security protocols. With the new EAL4+ common criteria security certification, Express Logic takes another significant step forward in IoT security by focusing squarely on the security needs of the embedded industry.


A Complete IoT Development and Connectivity Solution

Like all Express Logic products, the X-Ware IoT Platform SC is 100 percent created in-house, meaning that it includes no open-source code and is professionally supported. X-Ware IoT Platform SC provides high performance while maintaining a very small footprint, making it ideal for even the smallest of IoT devices. For example, X-Ware IoT Platform SC support for an embedded sensor typically requires less than 32KB of flash memory. Using X-Ware IoT Platform SC, embedded developers have plenty of room for their own application code, even on the smallest of devices.

In addition to the its performance and size advantages, of the X-Ware IoT Platform SC, leverages the safety-certified FileX embedded FAT-32/exFAT file system, GUIX GUI development and embedded runtime framework, and USBX embedded host/device USB stack. This makes the entire X-Ware IoT Platform solution available to embedded developers who are creating IoT applications that require more than just cloud connectivity.

“We enjoyed working with Express Logic in evaluating the X-Ware IoT Platform Secure Connectivity,” said Dirk-Jan Out, CEO, Brightsight. “We congratulate them on achieving their EAL4+ certification and for leading the charge for increased security in the entire embedded IoT space.”


About Express Logic and ThreadX

Headquartered in San Diego, CA, Express Logic, Inc., offers the industry’s most advanced runtime solutions for deeply embedded applications, including the popular ThreadX RTOS, the high-performance NetX and NetX Duo embedded TCP/IP stacks, the FileX embedded FAT-compatible file system, the USBX Host/Device embedded USB protocol stack, and the GUIX embedded graphical user interface development toolkit. Express Logic products include full source code and are available free of run-time royalties. For more information about Express Logic solutions, please visit, call 1-888-THREADX, or e-mail [email protected].


# # #

ThreadX, TraceX, FileX, and X-Ware IoT Platform are registered trademarks, and Safety-Critical Certification Pack, NetX, NetX Duo, USBX, GUIX, GUIX Studio, LevelX, preemption-threshold, picokernel, and UDP fast path technology are trademarks of Express Logic. All other brands or product names are the property of their respective holders.