Innovatrics wins high-level injection attack detection certification

Innovatrics said its Enterprise Identity Verification solution passed a high-level injection attack detection evaluation under CEN/TS 18099, an assessment that matters for regulated digital onboarding across Europe. The result gives banks, fintechs and qualified trust service providers independent evidence of stronger resistance to sophisticated biometric fraud attempts.

Why it matters: - The certification gives banks, fintech companies and qualified trust service providers independent evidence that remote identity proofing controls can resist sophisticated biometric injection attacks. - High is the top evaluation level under CEN/TS 18099 and aligns with ETSI TS 119 461 requirements for applicable remote identity proofing processes targeting Extended Level of Identity Proofing. - Stronger injection attack detection can reduce fraud risk without adding unnecessary friction for legitimate users.

What happened: - Innovatrics said the injection attack detection capability in its Enterprise Identity Verification solution achieved High-level certification under CEN/TS 18099. - The evaluation was performed by CLR Labs under the CLR Cert biometric Injection Attack Detection certification programme. - The announcement was made Nov. 3, 2026, in Bratislava, Slovakia.

The details: - Injection attacks try to bypass the physical camera and feed prerecorded, manipulated or AI-generated biometric data directly into the capture process. - The High-level evaluation is designed to test resistance against attacks that involve greater expertise, resources and preparation. - In the tested Innovatrics configuration, no injection attack succeeded. - The evaluation found that 1.3% of bona fide capture attempts were incorrectly classified as attacks. - Innovatrics’ system checks the capture environment for signs of manipulation, virtual or emulated cameras and altered image data. - Evidence collected during capture is protected as it reaches the server, where additional controls assess integrity and help identify substituted or replayed biometric data. - The certification covers face biometrics in the evaluated configuration. - The same injection attack detection approach can also protect identity documents, palm scans and fingerprints. - Innovatrics is an independent biometric technology provider for identity management and secure digital services. - The company said it has delivered biometric solutions since 2004 and has supported more than 1 billion people in 80+ countries.

Between the lines: - The result is especially relevant for organizations that need regulated identity proofing, where security evidence has to stand up to external review. - The low false-reject rate suggests the controls are aiming to balance fraud detection with user experience. - Innovatrics’ emphasis on layered controls matters because injection attacks target the capture pipeline itself, not just the final biometric match. - Jan Lunter, Founder and CEO of Innovatrics, said independent testing gives partners and their customers evidence that the company’s capture controls hold against attack risk.

What's next: - Innovatrics said it will keep testing as attacks change. - The certification may support future assessments by QTSPs, banks, fintechs and other regulated organizations considering remote onboarding and identity verification tools. - The company’s multi-modality approach suggests the same detection framework could be extended across additional capture types as deployments evolve.

The bottom line: - Innovatrics now has third-party evidence that its identity verification technology can withstand advanced biometric injection attacks in the tested configuration, a meaningful signal for high-assurance digital onboarding in Europe.