IDEMIA WebCapture Passed Biometric Security Testing
The software version 3.38 successfully blocked 900 biometric injection attacks in recent laboratory assessments.
Updated on Oct. 5, 2026 in Cybersecurity
Live Poll
Do you trust the security of remote biometric verification systems to keep your identity information safe?
BixeLab has confirmed that IDEMIA WebCapture version 3.38 successfully defended against all 900 attempted biometric injection attacks. The evaluation process utilized 10 distinct attack tool species to verify the system's resilience.
Why it matters
Testing software against recognized technical specifications provides organizations with objective, verifiable evidence of security performance. This ensures that biometric systems remain capable of detecting sophisticated threats like face swaps and deepfakes.
The system was evaluated against CEN/TS 18099:2024 Level 2 requirements, recording a bona fide classification error rate of 0.67 percent during 300 genuine-user transactions.
The players
BixeLab
BixeLab is a specialized laboratory that provides independent testing and assessment services for biometric security technologies.
IDEMIA Public Security
IDEMIA Public Security is a technology company that provides identity-related security systems to 600 agencies globally.
The details
The laboratory testing included 10 injection attack instrument species to stress-test the system's defenses. The successful results demonstrate the software's ability to maintain accuracy while preventing unauthorized access via synthetic media.
Timeline
The software assessment was conducted and reported as of October 5, 2026.
The Tech Race
This assessment underscores the ongoing arms race between biometric security providers and the increasing sophistication of synthetic injection tools. By aligning with the CEN/TS 18099:2024 framework, developers are moving toward standardized benchmarks that replace fragmented internal testing protocols.
For users and agencies, this verification confirms that the biometric systems currently being deployed have passed rigorous, standardized testing. This reduces the risk of authentication failures and improves confidence in systems used for identity verification.
The takeaway
Standardized laboratory testing serves as a critical checkpoint for developers to validate security claims against real-world threats. Users should prioritize platforms that undergo independent, verified assessments to ensure their biometric data remains secure against evolving synthetic attacks.
Further reading
For more information on the current state of digital defense standards, visit the Cybersecurity section.
Live Poll
Do you trust the security of remote biometric verification systems to keep your identity information safe?
