Innovatrics Earns High-Level Injection Attack Certification
Its identity verification platform's injection attack detection is certified at the High level under the European specification CEN/TS 18099.
Updated on Nov. 2, 2026 in Cybersecurity
Innovatrics' Enterprise Identity Verification platform has received High-level certification for injection attack detection under CEN/TS 18099, a European technical specification for detecting biometric data injection attacks. Testing by CLR Labs found no successful attacks in the evaluated configuration.
Why it matters
Injection attacks feed prerecorded, altered or AI-generated video directly into verification flows, often through a virtual camera, and identity verification depends on the integrity of what reaches the system. The certification addresses that specific threat for face biometrics.
CLR Labs tested the system against multiple injection attack techniques, including attempts to manipulate the biometric capture process, and 1.3 percent of genuine capture attempts were classified as attacks. The evaluation covered only the tested configuration, and performance against newer attack methods was not reported.
The players
Innovatrics
Innovatrics is a biometric identity technology company whose Enterprise Identity Verification platform was certified for injection attack detection.
CLR Labs
CLR Labs is an independent testing laboratory that evaluated the platform against multiple injection attack techniques.
Citadelo
Citadelo is a security testing firm that conducted black-box testing of Innovatrics' Identity Verification Toolkit.
The details
Innovatrics' injection attack detection capability is designed to work across capture modalities and weighs signals from the device, the image and the session together on the server. Separately, Citadelo conducted 16 days of black-box testing of the company's Identity Verification Toolkit, and its injection and bypass attempts were unsuccessful.
Timeline
Certification was reported in an article published on November 2, 2026.
The Tech Race
The certification places Innovatrics' platform against the High-level requirements of CEN/TS 18099, the European specification for detecting biometric data injection attacks. It positions the company within a competitive effort among identity-verification vendors to demonstrate measurable defenses against AI-generated and virtual-camera spoofing.
Organizations that rely on remote identity checks may see stronger protection against spoofed video being fed into verification flows. Users completing those checks should experience verification that is designed to distinguish genuine capture attempts from injected ones.
The takeaway
Identity verification is only as trustworthy as the data entering it, so independent certification of injection attack defenses offers a concrete signal for evaluating such systems. Buyers and users should look for measured results under recognized standards like CEN/TS 18099.
Further reading
Explore more Cybersecurity coverage for context on how identity verification systems defend against spoofing.
