red directive eu
DEKRA Product Testing

Ensuring a higher level of cybersecurity in your devices?

RED Directive testing

Prepare for the Radio Equipment Directive (RED)

Are you launching a product on the European market with a wireless radio connection? From August 2025 on, it must comply with the Delegated Act of the Radio Equipment Directive (RED Directive), the European Commission determined. The RED Directive contains various cybersecurity requirements that manufacturers, importers and distributors must meet to market their wireless devices in the European Union (EU). DEKRA is happy to help your products comply with these new regulations. Read more about future legislation and how our services can help you prepare.

RED Directive soon to be mandatory

The European Committee CEN-CENELEC plans to create new harmonized standards based on the requirements of this new RED Directive in the EU. This will enable you to show that your wireless products comply with the directive. In the meantime, manufacturers are advised to start preparing their products to meet future obligations. This way, products will soon be compliant when RED is mandatory.

The goal of the RED Directive

This Delegated Act is intended to ensure a higher level of cybersecurity in wireless devices in the EU, and to strengthen consumers' confidence in them. In this way, Europe becomes more resilient to cyberattacks. These new obligations focus on:
  • improving network resilience (Article 3(3)(d));
  • increasing users' personal data and privacy protection (Article 3(3)(e));
  • reducing monetary fraud (Article 3(3)(f)).
These new cybersecurity requirements apply to all products with a radio connection, such as 4G, 5G, Bluetooth, Zigbee and WiFi. This includes a variety of products, including mobile phones, tablets, smart watches, smart TVs, connected streetlights, wireless sensors, charging stations, connected cars, drones, vending machines and much more.
Cybercrime whitepaper
To make Europe truly more cyber resilient, end users in both the public and private sectors must do their part to contribute. So if your organization purchases and uses products with online connectivity, read this whitepaper to learn more about your role in fighting cybercrime.
Download

Our RED testing services

At DEKRA, we test your product according to technical requirements defined in existing cybersecurity standards. These standards are likely to be the basis for the future harmonized standards for the RED Delegated Act, such as:
  • ETSI EN 303 645
  • IEC 62443-X series
Does your product meet the cybersecurity requirements? Then you will receive a test report with an accompanying certificate for this compliance. With the IEC 62443 it is possible to obtain an IECEE-CB certificate. This shows you the security level.
RED-DA compliance with DEKRA: a three-step approach
As of August 1, 2025, the European Union’s Radio Equipment Directive Delegated Act (RED-DA) will come into effect. This regulation introduces stricter cybersecurity requirements for wireless equipment. Manufacturers must demonstrate that their products comply with the new requirements based on the EN 18031 standards.
To support this process, DEKRA offers a structured three-step approach toward RED-DA compliance:

Step 1: pre-evaluation – GAP analysis

We begin with a thorough GAP analysis. You provide an Implementation eXtra Information for Testing (IXIT) file describing the software implementation of your product. Based on this, DEKRA assesses the degree of compliance with EN 18031, including references to specific clauses within the standard. This gives you clear insights into areas for improvement.

Step 2: product evaluation

Next, DEKRA conducts an in-depth evaluation of your product in accordance with EN 18031. Using the IXIT file, we perform penetration testing to verify that the implementation aligns with the documented specifications. The results are documented in a detailed test report that can be used for self-declaration.

Step 3: EU-type examination and certification

As a designated Notified Body, DEKRA can issue an EU-Type Examination Certificate. This certificate serves as strong evidence of compliance and supports the CE marking process for products covered by the RED-DA.
Benefits of RED testing

Why DEKRA?

We are an independent laboratory accredited to test and certify the cybersecurity of products according to ETSI EN 303 645 and the IEC 62443-X series. In addition, DEKRA is an EU Notified Body for the Radio Equipment Directive and is recognized for radio and telecommunications testing under the IECEE's CB scheme. Therefore, we can support you in complying with the requirements of the Radio Equipment Directive in conjunction with other regulations and standards applicable to radio equipment and devices.