SGS validates security of contactless payment tech

Testing and certification company SGS has validated mobile payment software for use with smartphones by the Turkish software company Yazara.

SGS called it “a major leap forward in guiding customers to deploy secure payment solutions” after validating Yazara’s software for PCI Mobile Payments on COTS (commercial-off-the-shelf) standard (MPoC).

According to SGS, Yazara’s product is the first PCI MPoC isolated Software Development Kit (SDK) listed on the website of the PCI Security Standards Council, which produces standards for payment security.

SGS said that it worked in close partnership with Yazara, performing a security evaluation for Yazara’s MPoC software implementation with one of the major components being the isolated SDK – the building block of payment apps.

The evaluation was done at SGS Brightsight’s cybersecurity laboratory in the Netherlands, where “meticulous testing was conducted against the PCI MPoC standard’s rigorous requirements,” said SGS.

Introduced by PCI in 2022, the MPoC standard addresses the increasing popularity of mobile and contactless payments using consumer electronics, like smartphones and tablets, equipped with approved payment acceptance software to process payment transactions.

Ahmet Öztürk, CTO at Yazara said: “We extend our gratitude to the SGS Brightsight team who supported and guided us throughout this process. SGS Brightsight has been a critical part of our certification journey with their superior technical knowledge, impeccable service quality, and dedicated efforts. Thanks to their expertise and collaboration, our product has been certified with a quality and reliability that surpasses industry standards.”

Kiran Nair, Senior Security Evaluator at SGS said: “This is a significant milestone for SGS and demonstrates our dedication to leading innovation in the field of payment acceptance. Being the first to carry out an isolated SDK assessment highlights our commitment to remaining at the cutting edge for quality assurance and strengthens our reputation in the field of cybersecurity.”