Pick the one category that describes what your product itself does at its core. A product has one core function. Building in a part with one of these functions does not put your product in that category. A match narrows the conformity assessment routes open to the product. Pick none of these if nothing matches.
Application specific integrated circuits (ASIC) and field-programmable gate arrays (FPGA) with security-related functionalities Choose this if the core function is a custom or reprogrammable integrated circuit that performs a specific task and uses security functions such as encryption, authentication or secure key storage to protect other products, networks or services. Boot managers Choose this if the core function manages startup after power-on or restart by initialising hardware, loading or handing control to the operating system, and selecting boot options. UEFI firmware and boot loaders are examples. Firewalls, intrusion detection and prevention systems Choose this if the core function monitors and restricts network traffic, detects attempted or active intrusions, or actively prevents them. Network and application firewalls and host or network detection systems are examples. Hardware devices with security boxes Choose this if the core function securely stores, processes or manages sensitive data or performs cryptographic operations in hardware made of several separate components inside a physical enclosure that shows, resists or responds to tampering. Hypervisors and container runtime systems that support virtualised execution of operating systems and similar environments Choose this if the core function allocates computing resources and runs separated virtual machines, or manages the execution and lifecycle of isolated containers on one host operating system. Identity management systems and privileged access management software and hardware Including authentication and access control readers, including biometric readers. Internet connected toys with social interactive features or location tracking features Toys covered by Directive 2009/48/EC on the safety of toys, where the toy has social interactive features, for example speaking or filming, or has location tracking features. Microcontrollers with security-related functionalities Choose this if the core function is a programmable integrated circuit with its own memory and security functions, such as encryption, authentication or secure key storage, that protect other products, networks or services. Microprocessors with security-related functionalities Choose this if the core function is a central-processing integrated circuit that relies on external memory and peripherals and has security functions, such as encryption, authentication or secure key storage, that protect other products, networks or services. Network management systems Choose this if the core function monitors connected equipment such as servers, routers, switches, workstations, printers or mobile devices and controls their network operation or configuration. Operating systems Choose this if the core function provides the layer between hardware and software, controls software execution and manages resources, data, input and output, or access to peripherals. Password managers Choose this if the core function stores passwords on a device or server and may also generate, share or supply them to local or third-party applications. Browser extensions, enterprise tools and hardware password managers can fit. Personal wearable products with a health monitoring purpose, or intended for use by and for children Products to be worn or placed on a human body that have a health monitoring, such as tracking, purpose and to which Regulation (EU) 2017/745 or (EU) No 2017/746 do not apply. Also covers personal wearable products intended for the use by and for children. Physical and virtual network interfaces Choose this if the core function connects a device to a network through a physical adapter and its driver interface, or through a virtual interface that behaves like one. Wired, wireless, container and virtual network interfaces can fit. Products with the function of virtual private network (VPN) Choose this if the core function creates an encrypted logical tunnel over a physical or virtual network. VPN clients, servers and gateways can fit. Public key infrastructure and digital certificate issuance software Choose this if the core function manages digital certificates or their cryptographic keys, including creation, issuance, validation, renewal, revocation, storage, exchange or rotation. Routers, modems intended for the connection to the internet, and switches Choose this if the core function routes data between networks, converts signals for an internet connection, or forwards packets between networked devices through a managed switch. Security information and event management (SIEM) systems Choose this if the core function collects data from several sources, analyses and links that data, and turns it into information for threat or incident detection, forensic analysis or compliance work. Smart home general purpose virtual assistants Choose this if the core function receives spoken or written natural-language requests over the public internet and uses them to provide access to services or control connected devices in a home. Smart home products with security functionalities Including smart door locks, security cameras, baby monitoring systems and alarm systems. Smart meter gateways within smart metering systems, and other devices for advanced security purposes, including for secure cryptoprocessing Smart metering systems as defined in Article 2, point (23), of Directive (EU) 2019/944 on common rules for the internal market for electricity. Smartcards or similar devices, including secure elements Choose this if the core function is a secure element that stores, processes or manages sensitive data or cryptographic operations and is built to show, resist or respond to tampering. Smartcards place such an element in a card or another carrier. Software that searches for, removes, or quarantines malicious software Choose this if the core function detects or searches for malicious software or code on devices, or removes or quarantines it. Antivirus, antimalware, rootkit detection and rescue disks can fit. Standalone and embedded browsers Choose this if the core function lets users access, display and interact with web content and services. Standalone browsers, browsers embedded for integration and browsers with an AI agent can fit. Tamper-resistant microcontrollers Choose this if the core function is a security microcontroller that can show, resist or respond to tampering and is designed for AVA_VAN level 2 or 3 protection. Tamper-resistant microprocessors Choose this if the core function is a security microprocessor that can show, resist or respond to tampering and is designed for AVA_VAN level 2 or 3 protection. None of these Choose this only if none of the descriptions above is the one core function of the product itself. A matching function in an integrated component is not enough.