Common Criteria Evaluation

Our Common Criteria (CC) evaluation services help product developers achieve internationally recognized certification so they can grow confidently.

Algorithm Testing

Trellis Labs can support algorithm vector testing for CAVP testing — a prerequisite for both Common Criteria and FIPS 140-3 certification. We help companies get started on the right path.

Functional Pre-testing

Our Functional Pre-testing validates a product’s ability to pass certification testing. We ensure the documentation accurately reflects product capabilities and is supported by a solid, compliant foundation. We can pre-test a product rapidly to detect any issues early on in the compliance process.

Consulting & Gap Analysis

We work closely with you to determine the scope of your certification effort and identify necessary changes early in the process — saving time, money, and effort.

Why Trellis?

At Trellis, we bring more than experience in compliance and cybersecurity. Many of the advanced methodologies developed by our founder helped shape key industry practices that are widely used today. When you work with us, you’re not just choosing another testing lab — you’re gaining access to the people and innovations that helped define the compliance and security landscape.

• Broad Experience — At Trellis, we draw on a strong foundation in compliance and cybersecurity. When you choose us, you’re working with a team focused on applying well-established, reliable approaches to support your security and compliance goals. Our founder brings experience from both sides of the certification process, having worked within accredited test labs as well on vendor compliance teams. This dual perspective helps us anticipate challenges early and avoid last minute surprises.
• Responsiveness & Communication — Certification can be complex. We prioritize clear, timely communication and provide direct access to the evaluators handling your project. Clients always know what’s happening, what’s needed, and what comes next.
• Effective AI — Simply pointing an LLM at a task and sitting back won't work. By combining our compliance, engineering,and AI experience, we can accelerate testing without generating useless "AI slop" results.

Who We Are