EU CCAT project builds open-source tools for continuous security assessment

The EU-funded CCAT project, coordinated by Masaryk University under Horizon Europe, is developing an open-source toolchain for continuous security assessment of digital products and services. It adapts four tools — TLS-Scanner, SCRUTINY, ALVIE and sec-certs — covering TLS security, cryptography, embedded hardware and certification data.

• The project is coordinated by Masaryk University under Horizon Europe
• TLS-Scanner, built on TLS-Attacker, analyses TLS client and server configurations
• SCRUTINY evaluates cryptography in smartcards, TPMs and embedded libraries
• sec-certs structures Common Criteria, EUCC and FIPS 140 records and links them to CVEs