Google’s Android pKVM Framework Achieves SESIP Level 5 Certification

Google has revealed that protected KVM (pKVM), the hypervisor that powers the Android Virtualization Framework (AVF), has achieved SESIP Level 5 certification, marking a major breakthrough for open-source security and consumer electronics.

This milestone positions pKVM as the inaugural software security system tailored for widespread deployment in consumer devices to reach this elite assurance threshold.

The certification, conducted through a rigorous hands-on evaluation by Dekra, a prominent global cybersecurity lab, aligns with the TrustCB SESIP scheme and complies with the EN-17927 standard.

SESIP Level 5 incorporates the highest tier of vulnerability analysis and penetration testing, AVA_VAN.5, under ISO 15408 (Common Criteria), ensuring resilience against sophisticated adversaries equipped with advanced skills, insider knowledge, substantial resources, and high motivation.

New Benchmark in Open-Source Security

This achievement underscores pKVM’s role in fortifying Android’s multi-layered security architecture.

Unlike many Trusted Execution Environments (TEEs) in the industry, which often lack formal certification ...