6 Security Certificate Declaration

This section provides information on the list of security tests conducted, and the dates of their completion.

Table 6-1 Security Certificate Declaration

Security Test Description	Test Completion Date	Summary
Static Source Code Analysis Assesses adherence to common secure coding standards	7th July 2025	All Critical findings addressed.
Dynamic Analysis (including fuzz testing) Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25	N/A	Not applicable for FTRA since it functions as a standalone SSH client application.
Vulnerability Scans Scans for CVEs in embedded 3rd party components	26th May 2025	All Critical and High findings addressed
Malware Scans Scans all deliverable software packages for the presence of known malware	27th October 2025	No Findings