Common Criteria Certified Products (ISO/IEC 15408, NIAP Product Compliant List)

Where this market publishes its structure

• Common Criteria Portal certified products (commoncriteriaportal.org/products/certified_products.csv) machine-readable, 200 text/csv; 2,111 current certificates; manufacturer names only; 99 in-market providers linked across CC current + archived
• Common Criteria Portal archived certificates (commoncriteriaportal.org/products/certified_products-archived.csv) machine-readable, 6,423 archived certificates; categories held only here written as lapsed: true; 1,128 manufacturers across both files
• NIAP Product Compliant List (niap-ccevs.org/Product/PCL.cfm; public JSON /api/project/product/pcl_products_all/) machine-readable, page is a client-rendered SPA; its own public JSON (no token): 1,769 rows (Certified 265, Archived 1,464, In Progress 40), 334 vendors; 68 in-market linked
• Vendor homepages not machine-readable: none of the three registers gives a vendor website; identity via Wikidata P856 or register-name only

Own = declares at least one integration itself; covered = visible only because an aggregator, standards body, regulator or partner contract names it; distribution-only = listed only on cloud marketplaces it sells through, a channel reported beside, never counted as its own declared integrations; undeclared = nothing we can read, so no number; declares_compatibility = providers with a `compatible` shape vote, report only (kin, 2026-10-13): never counted as own, never in depth or position.

Taxonomy how this market maps onto apis.io

Derived 2026-10-23 from the 124 providers in this market we could resolve in the catalog. The percentage is the share of those providers carrying each one; it describes the market, not the tag or industry. Tag groups have no page of their own yet, so they are listed unlinked.

share of resolved cohort carrying it; tags >=0.20 & >=3 members (max 12, junk dropped), tag_groups >=0.20 (cooccurrence, non-cross-cutting; max 8), industries >=0.20 (max 6), areas >=0.10 (max 6; areas are keyword-matched and sparse), capabilities L1 >=0.20 (max 8); derive-market-taxonomy.py

Leaders by position (provisional)

Provisional: grouped by position, depth compared within a position only. Distribution (cloud marketplaces) and iPaaS bridges are counted beside position, never inside it. Unknown-builder listings are left out of position shares and counted here.

gravity 3 · other companies invest to build on it

builds-on 9 · publishes apps on other platforms' stores

covered 1 · reached mainly through aggregators

regulated 1 · named in a regulator's register or partners' contracts

standard 89 · listed by a voluntary standard's own directory

core 2 · builds the connectors its customers need

mixed 10 · no single mode dominates

list 1 · a long list on its own page, mostly unevidenced

long-tail 1 · reached only through iPaaS bridges

distribution 1 · only sells through cloud marketplaces

undeclared 6 · declares nothing we can read: no number

Top workflows by market votes

Workflows (Arazzo) and their phrasing are generated by API Evangelist, ranked by market votes (integration edges in the graph, weighted by channel).

In-market workflows only: a step on the market provider's side maps to this market's business capabilities (), and the partner is not a generic export/notify app. Other workflows are counted as bridges (including any whose steps do not resolve to a capability yet). Methodology. In-market: 2; bridges: 0.