In the world of cybersecurity, ethical hacking proactively identifies security vulnerabilities before malicious actors (i.e., unethical hackers) can exploit them. By simulating real-world attacks, organisations can strengthen defences, protect sensitive data, and maintain public trust. In the physical security world, ethical hacking can transform cybersecurity of security systems from a reactive struggle into a strategic safeguard. We asked our Expert Panel Roundtable: What is the role of ethical hacking as it relates to physical security?

Next-generation (Next-Gen) technologies are products, services, or infrastructures that represent a significant leap forward rather than a small, incremental update. In the physical security industry, NextGen products are those that enable disruptive change, breakthrough performance, and a fundamental change that renders previous products obsolete. We asked our Expert Panel Roundtable: What is the next generation of physical security solutions, and how will they change the industry?

Emphasising proactive rather than reactive security shifts the focus from dealing with crises and damage control to prevention. Advantages of a proactive approach include cost efficiency, better business continuity, and fewer crises that draw attention away from strategic improvements. Staying ahead of threats is a core mission of the security department, and technology has evolved to enable security professionals to deliver on that mission better than ever. We asked our Expert Panel Roundtable: How are security systems transitioning from reactive to proactive, and what is the benefit?

Multiple technology trends are transforming the physical access control market. There is a fundamental shift away from physical cards and keys toward digital identities — mobile credentials, digital wallets, biometrics, and cloud-native access platforms. These next generation access solutions are radically reshaping how buildings operate, protect staff, and perform functionally. At the same time, AI and analytics solutions are being layered onto these physical access control systems to support predictive threat detection and behavioural insights. Access data itself is becoming an asset for sustainability, space optimisation, and smart building initiatives. Risk, impact operations and experience The annual HID Global Security and Identity Trends Report highlights these and other issues The annual HID Global Security and Identity Trends Report highlights these and other issues. The survey cites improving user convenience as a priority for nearly half of organisations, while 41% are focused on simplifying administration, and 28% struggle with system integration. These are not theoretical challenges, they are day‑to‑day friction points that add cost, increase risk, impact operations and experience, and, of course, must be addressed. HID Global’s commercial focus HID Global’s commercial focus is to help organisations digitise their access control — with mobile identities, biometrics, and cloud platforms — and then to use the data to deliver more value. “We are turning access control from an operational cost into a software-driven asset that improves efficiency, supports Environmental, Social, and Governance (ESG) goals and even creates new revenue opportunities,” says Steven Commander, HID Global’s Head of Consultant Relations. The impact of digital transformation Digital transformation is the method of moving access control from hardware and physical credentials Digital transformation is in the process of moving access control from hardware and physical credentials to a software-driven, integrated experience. The transformation strengthens security while also improving user convenience — transforming the “pavement to the desk” journey. HID enables this shift through mobile credentials, biometrics, cloud-native platforms, and solutions that allow third-party applications to run on door hardware. “This helps customers turn access data into operational and commercial outcomes, while also improving the overall user experience,” says Commander.  Digital transformation in access control is not focused on chasing the latest trends. Rather, transformation is about turning software, data and integration into outcomes that matter to customers, says HID. “Security becomes stronger and more adaptive,” says Commander. “Operations become simpler and more cost‑effective. Experiences become seamless and consistent. Sustainability moves from ambition to action. And the financial case becomes clearer as efficiencies are banked and new value streams emerge.” The challenge of futureproofing with long lifecycles Given that physical security technologies will be in place for 15 to 20 years, it is important to plan for how systems can evolve over time. Considering how rapidly security threats, compliance standards, and user expectations change, 15 to 20 years is a long time. The decisions made at the beginning of a system’s lifecycle can either limit flexibility later (which will be costly) or enable long-term adaptability. Support for open standards such as Open Supervised Device Protocol (OSDP) is therefore important Choosing products and platforms that are open, interoperable, and designed for updates can enable future-proof projects. Support for open standards such as Open Supervised Device Protocol (OSDP) is therefore important.  In addition, systems built on open controller platforms — such as Mercury — enable organisations to switch software providers or expand functionality without replacing core door hardware. Architectural openness is key to system lifecycles and maximising the return on investment (ROI) from a chosen solution. Digital credentials and mobile access Flexibility and upgradeability should also be top of mind when it comes to endpoints like access control readers. While RFID cards are still commonplace, there is a clear trend toward digital credentials and mobile access. Readers that support both allow organisations to transition at their own pace, without committing to a full system overhaul. A long system lifecycle does not mean technology should remain static. Security, particularly cybersecurity, demands more frequent updates. Technologies that support firmware upgrades in the field extend the value of a deployment while helping organisations keep pace with emerging threats. In that sense, lifecycle thinking is not just about longevity — it’s about maintaining resilience and readiness over time. Applying biometrics and mobile identities Biometrics is becoming mainstream as a credential alternative, strengthening security without adding friction Biometrics is becoming mainstream as a credential alternative, strengthening security without adding friction. Many organisations are now deploying biometrics to support fast, seamless access journeys, with adoption already around 39% in access control according to HID’s recent research.  In addition, 80% of organisations surveyed expect to deploy mobile identities within the next five years. Full technology integration enables tap‑to‑access without opening an app; the user journey becomes faster, safer, and more convenient. “It is where the industry is headed and we are at the vanguard of this,” says Commander.    Ongoing challenge of cybersecurity At HID Global, cybersecurity is embedded into everything, from corporate processes and development practices to the solutions they bring to market. “Our approach ensures that customers can strengthen their overall security posture, not only by deploying secure products but by benefitting from HID’s commitment to the highest industry standards,” says Commander. HID holds multiple globally recognised certifications, including ISO 27001, ISO 14298, SOC Type 2 and CSA STAR, which demonstrate their robust information security and cloud security practices. In addition, HID’s SEOS® secure chipset is independently SEAL-certified, providing one of the most advanced levels of protection available on the market today. “Ultimately, this means organisations are not just purchasing isolated secure products; they are implementing solutions developed and delivered within a comprehensive, cybersecure framework,” says Commander. “When deployed according to best practices, HID solutions enable customers to achieve the highest levels of resilience against evolving physical and cyber threats.” Developing green and sustainable solutions A huge amount of waste is generated from the manufacture of plastic RFID access cards Digital credentials align with the sustainable solutions that everyone wants. A huge amount of waste is generated from the manufacture of plastic RFID access cards. Over 550 million access cards are sold annually. This creates 2,700 tons of plastic waste and 11,400 tons of carbon, based on a PVC card weighing 5 grams.  Therefore, digital credentials self-evidently reduce the reliance on plastic cards (helping reduce carbon emissions by up to 75% according to HID’s research), while leveraging access control system data supports energy optimisation by shutting down or reducing systems in unused spaces. Energy use and CO₂ emissions can be cut dramatically, showing how access systems can contribute to sustainability goals and green building certification. What is the latest in smart buildings? Smart buildings increasingly rely on mobile access control as the backbone for digital services. Real-time access data enables new services such as automated room bookings, HVAC control, lift/elevator calling, e-bike hiring, and so on. Smart buildings increasingly rely on mobile access control as the backbone for digital services The financial upside is clear; smart, digitally transformed buildings can deliver around 8% higher yields per square foot versus traditional office space. Operational savings accrue from reduced administration, the removal of card production and shipping, and lighter IT support. This creates a value cycle — better experiences drive adoption, adoption fuels monetisation, and monetisation funds further improvements. Achieving technology impact in the real world One standout project is One Bangkok – a $3.9 billion mixed used development in Thailand – which demonstrates the scale of what can be achieved when access control data is used for optimisation, particularly when it comes to monitoring facilities usage and occupier behaviours. By switching lights off or lowering the temperature in unused rooms, for example, the One Bangkok building demonstrates this potential with a 22% reduction in energy consumption, saving 17,000 MWh and 9,000 tons of CO₂ annually.  Sustainability is a key factor in contributing to how properties are valued. And sustainability extends far beyond digital credentials having a lower environmental impact than plastic cards.  Buildings with recognised sustainability certifications often command rental premiums of around 6%, and three‑quarters of security decision‑makers now consider environmental impact in their procurement assessments.

A critical infrastructure security system unifies high-assurance access control, scalable intrusion detection including video verification, perimeter protection, and lone worker safety into a single platform, helping operators of electricity, water, and gas networks protect distributed sites, support regulatory compliance, and maintain the uninterrupted delivery of essential services.  A loss of these services disrupts economies and endangers communities, which makes protecting them a national priority. It's also uniquely difficult, because critical infrastructure is rarely a single site. It's a distributed network of substations, treatment plants, and pipelines, often spread across vast and remote geographies.  Most demanding environments That challenge is now backed by strict regulations across in all sectors including energy, water, and sewerage. Responsible entities must maintain a Critical Infrastructure Risk Management Program that addresses physical security alongside cyber, personnel, and supply chain hazards. For operators, strong physical security systems have become a compliance necessity. For over 38 years, Inner Range has purpose-built security solutions alongside critical infrastructure experts, protecting these vital assets with a multi-layered approach designed for the most demanding environments.  Multi-factor authentication Access control is the foundation. Inner Range ensures only authorised personnel reach a site, using access cards, mobile credentials, PINs, or biometric authentication. Multi-factor authentication combines these methods for stronger protection, while video surveillance, granular scheduling, and real-time logging give operators complete visibility over every access point.  The highest-risk zones demand more. Inner Range's High-Security solution has attained Class 5 accreditation which is the highest classification for intruder alarm systems under the Australian and New Zealand standard AS/NZS 2201.1, built for Zone 3 high security environments. Where traditional alarms focus only on external intruders, Class 5 also defends against insider tampering, through two-factor disarming, faster polling, and end-to-end encryption. Inner Range’s High Security solution has also been deployed to secure defence sites and critical infrastructure throughout Europe, the Middle East and the America’s. Advanced video analytics For operators, this means genuine assurance. Every detector, cable, and message is encrypted, from the edge device right through to the control panel, so the system can be trusted to detect and report a breach even when someone is actively trying to defeat it.  For most sites, the perimeter is the first line of defence. Inner Range provides advanced video analytics for intruder detection that can scale across thousands of locations. Integrations with perimeter devices such as electric fences, beams, and other detection technologies provide the physical additional layers of perimeter security for large areas. Whether the protected area is an open expanse or a small building, smart analytics enable instant, automated threat responses. Distance is no barrier. The Multipath IP Cellular communication platform uses the internet and 4G cellular networks to transmit encrypted alarm messages to monitoring center's, ensuring first responders can act quickly no matter how remote the site.  Video surveillance systems Critical infrastructure work often happens at remote and dangerous sites where, sometimes, people work alone. Protecting these workers is both an operational and a duty-of-care priority. Inner Range supports duress alarms from fixed or mobile systems that integrate with lone worker systems featuring man-down detection and personal tracking. When an alarm is raised, guards and staff are notified instantly through the Communicator messaging application via SMS and email, while Real-Time Location Systems pinpoint personnel on site for a faster response and video surveillance systems provide the eyes and ears on the situation. Specialised key locking A single utility can span hundreds of sites and dozens of subsystems. Inner Range's Enterprise platform unifies access control, video surveillance, building management, intercom, environmental monitoring, and specialised key locking, all into one interface. Operators get a single platform to monitor people, assets, machinery, and site conditions, and to respond to incidents in real time. This centralised oversight is what turns a sprawling, complex estate into something manageable, visible, and defensible.  Unifying access control The real strength is in how the layers work together. Access control, video surveillance, intruder detection, perimeter sensors, facial recognition, location tracking, and lone worker safety operate as one coordinated system through a single pane of glass to detect, locate, and respond to threats automatically. Alerting the right people the moment an incident occurs.  Every deployment is backed by professional support, from software maintenance and cyber security updates to remote assistance and custom integration. With over 130 native integrations and more than 170,000 systems deployed globally, the platform scales from a single facility to a national network.  The infrastructure a nation relies on cannot afford gaps or guesswork. By unifying access control, video surveillance, intrusion detection, perimeter protection, and worker safety into one coordinated platform, Inner Range helps operators protect what matters most, and keep essential services running, from the core to the edge. 

Recent FBI and EPA warnings about cyberattacks on internet-connected operational technology at U.S. water utilities underscore a broader risk: adversaries systematically hunt for any internet-facing asset an operator has not fully secured. A successful compromise can disrupt essential services, expose sensitive operational data, and force already-stretched teams into costly emergency response. Web applications, administrative consoles, and APIs used for monitoring, management, and integration are part of that attack surface and should not be overlooked. Confirmed exploitable vulnerabilities To help water utilities strengthen this layer of their defences, Invicti is offering qualifying organisations three months of complimentary access to its application security platform. Invicti helps public-sector and critical-infrastructure organisations uncover web applications and APIs (including unknown internet-facing assets) and focus scarce resources on confirmed exploitable vulnerabilities. "Defence in depth cannot stop at the network perimeter," said Priyank Savla, VP at Invicti. "Web applications and APIs are an attack path that critical-infrastructure operators cannot afford to ignore. They deserve the same continuous attention as the infrastructure behind them, because you cannot defend what you cannot see." Critical-infrastructure operators When a qualifying organisation engages with Invicti, the team will help it: Discover and inventory web applications and APIs, including previously unknown internet-facing assets. Scan the application and API attack surface for security weaknesses. Confirm which vulnerabilities are exploitable and prioritise the risks that require action. Reduce time spent chasing false positives when teams need to respond quickly. Receive guidance and support throughout the three-month engagement. Guided onboarding and support "Our goal is to help water utilities get a clearer picture of their web application and API exposure without adding more noise to already-demanding response efforts," Priyank Savla added. "We want teams to know what is exposed, understand which issues are real, and have practical support as they work to reduce risk." Invicti is offering qualifying U.S. water utilities three months of complimentary access to the Invicti platform. The program includes guided onboarding and support from an Invicti engineer to help each team scope, configure, and test its web applications and APIs, then interpret and act on the results. Eligibility is limited to qualifying organisations. Water utility operators can contact Invicti to request access and confirm whether they qualify.

Integrated access control and security manufacturer TDSi by Hirsch has released GARDiS version 3.3, a major update for its powerful access control software designed to make access control and integrated security management easier to use, easier to administer and more intuitive for security teams. Key additions include Ajax Cloud intruder integration, basic intruder panel connection on the GARDiS controller, simplified credential types, and enhancements to security controls and data governance. Delivering practical improvements Tina Pemberton, Director SMB Software at TDSi by Hirsch commented, “GARDiS 3.3 is an important milestone for our customers. These updates make the platform faster, simpler and even more secure, while opening the door to powerful new integrations such as Ajax intruder management. Our focus is always on delivering practical improvements that make everyday security management easier, and this latest release reflects that commitment.” GARDiS 3.3 brings intruder management more closely into the operator’s existing workflow. Through integration with Ajax Intruder Cloud, hubs, devices and groups can be discovered and viewed within GARDiS, allowing authorised users to see status changes as they happen and to arm, disarm or manage bypass settings without moving between separate systems. Intruder panels, zones and groups can also be used within Cause & Effect rules, helping routine responses happen consistently and reducing the need for manual intervention. Redesigned credential model For sites where a direct panel integration is not available, the GARDiS controller can now provide basic intruder functionality through its own outputs. This gives installers and end users a straightforward option for simpler applications, while retaining the familiar GARDiS environment. One of the most visible usability improvements is a redesigned credential model. A single universal “Card or Fob” type now works across virtually all reader and card technologies, removing the need for administrators to select and match credentials to specific decode types. Existing credentials are migrated automatically during upgrade and can be verified before changes are applied, helping teams move to the new model with confidence. Making credential management Biometric credentials and IP lock whitelisting are also incorporated into the unified approach. By making credential management more consistent, GARDiS 3.3 reduces training requirements, lowers the risk of configuration errors and makes common administrative tasks quicker to complete. The release gives organisations more precise control over what users can see and do. Configurable password rules, banned-word lists and automatic account lockout support stronger login security without complicating administration. New event dashboard permissions govern access to live and archived events, while organisation-based filtering helps ensure users only see information relating to the people they are authorised to manage. Protecting confidential information Sensitive reporting is easier to handle too. Saved reports can be kept private to their creator or shared only with designated users, giving teams a practical way to protect confidential information while preserving the flexibility of the reporting environment. A series of further improvements makes the interface and supporting workflows feel more consistent. Event management is more flexible, with controller-level event disabling and quicker select-all or unselect-all controls for alarms and sounds. Messaging and email validation are clearer, Active Directory monitoring handles organisational changes more reliably, and user identification and access-level handling have been refined. Combining dependable protection The release also improves performance on larger systems through faster bulk database updates and message-queue handling. People and credential exports now include organisation and department information, while simplified Chinese is available as a selectable interface language, extending the platform’s usability for international teams. Compatibility enhancements include the latest STid V3 mobile credential API, native support for 32-bit Wiegand readers and credentials, and the ability to configure OSDP readers as In/Out readers. DigiTouch readers are now free to license, making it easier for customers to use the technology across suitable projects. The platform has also moved to .NET 10 to support a smoother installation and upgrade experience. GARDiS 3.3 continues TDSi by Hirsch’s long-standing approach to security technology: combining dependable protection with tools that are straightforward to deploy and manage. As TDSi adopts the Hirsch name, customers will continue to benefit from the same specialist knowledge, responsive support and proven products, strengthened by the wider capabilities of the Hirsch Group.

Arrow Electronics, Inc. announces the appointment of Deidra C. (Dee) Merriwether to the new position of president and chief operating officer, effective Sept. 8, 2026, reporting to William F. Austen, interim chief executive officer. Merriwether will be responsible for leading Arrow’s global business segments and logistics organisations. With this announcement, the company augments its executive team and strengthens succession planning. “We are delighted that Dee is joining Arrow as president and chief operating officer. Her extensive experience in distribution combined with her successful track record leading commercial, operational, and financial teams make her an ideal leader to join Arrow at this time to support our terrific teams driving profitable growth and value creation for stakeholders,” said Steven H. Gunby, chairman of the Arrow board of directors. Optimised performance results Merriwether brings a robust background in broad-based business management and optimised performance results. Before joining Arrow and since 2021, she served as the senior vice president and chief financial officer of W.W. Grainger, Inc. and prior to that as the senior vice president and president, North American sales and services, and other roles of increasing responsibility since 2013. From 2002 to 2013, she held roles of increasing responsibility in general management and finance at Sears Holdings Corporation, departing as chief operating officer, retail formats, in 2013. She started her career as an engineer and production leader at Eli Lilly and Company and gained valuable accounting and mergers and acquisitions experience at PricewaterhouseCoopers International Limited. Corporate responsibility committee “I am thrilled to welcome Dee to Arrow and our executive team. She brings exceptional depth with her more than two decades of substantive distribution, sales channel, operations, and finance experience, with a demonstrated talent for innovation, versatility, leadership, and performance results. Further, she has the qualities we seek in our leaders -- she is humble, approachable, transparent, and driven by purpose and values to deliver results for our suppliers, customers, employees, and investors,” said Austen. Merriwether holds a Master of Business Administration from Indiana University’s Kelley School of Business and a Bachelor of Science degree with a major in chemical engineering from North Carolina Agricultural and Technical State University. She currently serves on the board of Weyerhaeuser Company as an independent director and member of the audit committee and governance & corporate responsibility committee.

Gozoki, a French family-owned company and pioneer in the freshly prepared meals market (Maison Briau, Maison Tino and other brands), has taken the step of investing to secure its industrial sites. At its facilities in Agen, the company now benefits from a state-of-the-art video surveillance system deployed by specialist integrator SDP, using Hanwha Vision hardware and software solutions. Production sites in the food manufacturing sector face stringent requirements for security, access control and traceability. Protecting staff, preventing intrusions, monitoring logistics flows and securing sensitive areas all present significant challenges. Present significant challenges As part of its ongoing commitment to improving its infrastructure, Gozoki began modernising its surveillance system in 2025 to enhance reliability, accuracy and responsiveness. “We needed a system capable of operating 24/7 in a demanding environment while delivering outstanding image quality. The Hanwha Vision solution meets these requirements perfectly,” says Nicolas Jeannesson, buildings and energy manager at Gozoki. To deliver the project, Gozoki selected SDP, a company renowned for its expertise in integrating electronic security solutions. SDP carried out the site survey, designed the network architecture, installed the equipment and completed its advanced configuration. The objective was to deliver a robust, scalable solution perfectly suited to the demands of a challenging industrial environment. “Our role is to provide a turnkey solution that is reliable and built to last. Hanwha Vision cameras enable us to deliver high levels of performance while simplifying maintenance,” says Pierre Albanese, managing director of SDP. Video analytics capabilities The cameras SDP and Gozoki chose to install were Hanwha Vision’s, and were selected for their exceptional image quality, even in challenging conditions, thanks to high-resolution sensors and WDR technologies. Advanced video analytics capabilities that enable intrusion detection, intelligent management of sensitive areas, and behavioural analysis, were also key features that Gozoki required. The reliability and durability of Hanwha Vision’s cameras are essential in industrial environments that are subject to fluctuations in temperature, humidity or lighting, such as Gozoki’s sites. Enhanced cybersecurity - a critical factor in preventing the risk of cyber attacks on connected systems - was also a vital element of the project’s requirements. The installed cameras cover all strategic areas, including vehicle entrances, loading bays, storage areas, internal traffic routes and external perimeters. “The integrated video analytics allow us to go far beyond simple monitoring. We now have a decision-support tool capable of anticipating risk situations,” adds Nicolas Jeannesson of Gozoki. Future regulatory requirements With the planned deployment of nearly 200 cameras across multiple sites around Agen, Gozoki now benefits from a modern video surveillance system that supports the company’s growth while meeting current and future regulatory requirements. “This project perfectly illustrates our commitment to supporting our customers over the long term with reliable, scalable technologies,” concludes Pierre Albanese. Together, SDP and Hanwha Vision delivered Gozoki a cohesive, high-performance and scalable solution, providing a clear, centralised view of security across its facilities.

Evolv Technologies Holdings, Inc., a security technology company pioneering AI-based solutions designed to create safer experiences, announces that Evolv Express®, the company’s people-screening system, has been selected as a security partner in Northwestern University’s new Ryan Field following a rigorous evaluation process. As Ryan Sports Development prepares to open the first NFL-type stadium in college sports, they evaluated available screening solutions before selecting Evolv Express to help deliver an elevated fan security experience. Evolv Express uses advanced sensor technology and AI to detect concealed threats and identify the location of the potential threat while allowing people to move through checkpoints at their natural walking pace. Advanced sensor technology The New Ryan Field, in the final stages of construction, will have a capacity of 35,000 fans when it opens on October 2nd with a nationally televised game. In addition to Northwestern football games, New Ryan Field will also host other athletic and community events throughout the year. The project is designed to set a new standard for the college football experience and boasts several features and innovations fitting its ambitious vision, including the Evolv Express security systems. The multi-year agreement between Evolv and Ryan Sports Development includes a variety of marketing elements and designates Evolv as Northwestern University’s “Official Fan Screening Provider.” Exceptional arrival experience “Our goal for the New Ryan Field is simple: build the best place to watch football in America,” said Pat Ryan Jr., CEO of Ryan Sports Development. “That ambition covers not only the event itself, but also the entire time that a fan is on site. We built a stadium designed to represent the future of college athletics, and so much more, and we rigorously evaluated available screening technologies and selected Evolv Express because it aligned with our goals of delivering a secure, convenient, and exceptional arrival experience.” “When an institution invests in creating what it believes will be the premier college football venue in the country, every decision matters, including the first impression fans receive when they arrive,” said John Kedzierski, President and CEO of Evolv Technology. Ambitious stadium projects “Northwestern had the opportunity to evaluate the industry’s leading screening solutions as part of this landmark project, and we are honoured that Evolv Express was selected to help deliver the elevated fan experience Ryan Field is designed to provide. It’s a testament to the strength of our technology that one of the most ambitious stadium projects in college sports chose Evolv to help welcome fans through its gates.” The New Ryan Field at Northwestern is another signature deployment on Evolv’s growing roster of higher education customers, as well as numerous stadiums, arenas, theme parks, schools, hospitals and other public spaces around the world.

iDenfy, the global RegTech solution provider that delivers identity verification and fraud prevention tools, has implemented Czech Bank iD into its electronic identity verification software. The addition of the new digital ID or non-document verification method for the Czech market gives businesses a native alternative for verifying Czech citizens through their existing bank login credentials, without asking for a physical document during the onboarding process. Czech Bank iD is a nationwide, bank-issued digital identification system introduced in the Czech Republic in 2021. It allows citizens to use their internet banking credentials to authenticate themselves for both e-government and private sector services. Separate identity document The system is currently used by over 5,000,000 internet banking users, which corresponds to an adoption rate of 57% across the Czech Republic with 9 million people. Czech Bank iD runs on the OIDC protocol and operates through a bank delegation model, meaning the verification is confirmed directly by the user’s bank rather than through a separate identity document. iDenfy’s non-document verification platform was built to operate alongside the platform’s standard document-based KYC flow. Businesses can configure the platform to automatically route users to the Czech Bank iD path when traditional document capture is unavailable or produces insufficient image quality, a scenario that iDenfy’s internal data consistently shows as a recurring source of session drop-off. The combined flow is available to all iDenfy clients at no additional cost and can be activated in the dashboard settings without any additional integration work. Additional integration work To perform a successful verification, Czech Bank iD checks the person’s given name, family name, middle name, full name, date of birth, nationality, sex, phone number, and full address details. Where available, it can also return document data, such as document type, number, issue date, expiration date, issuing country and authority. This gives businesses a verification result that is both broad in scope and consistent in structure, since the data is returned directly by the bank network rather than extracted from a scanned image. As defined by Regulation (EU) 2024/1183, each of the EU 27 will have to implement the EU Digital Identity Wallet for citizens and residents by the end of 2026. Every bank, payment, and electronic money institution will have to support wallet-based credentials as Strong Customer Authentication measures. Bypassing security controls The Czech Republic has the third-highest risk of cyber fraud globally, according to security firm Gen Digital, which conducted research from Avast, AVG, and Norton companies. Social engineering attacks, a form of psychological manipulation in which criminals trick people into giving up private data, downloading malware, or bypassing security controls, made up 86% of the threats that happened in the country. iDenfy states that for businesses that serve Czech market users, the ability to verify identity through a credential that more than five million adults already use for banking and government access can remove a document capture step that often contributes to onboarding drop-off. It still maintains a secure enough compliance procedure to keep the process trustworthy for both the user and the business so it can validate a real person behind it. Digital identity networks “Czech Bank iD has become one of the most widely trusted digital identity credentials in the Czech Republic. Our clients that serve that market can now meet Czech users on those terms and present a verification path that feels familiar and requires no additional physical document capture at the point of onboarding,” said Domantas Ciulde, the CEO of iDenfy. It is worth mentioning that iDenfy’s KYC software currently covers over 16,000+ government-issued documents across over 200+ countries and territories. If a case is not resolved automatically, it is reported to iDenfy’s internal compliance review team, which works 24/7 to review identities and fix any onboarding issues. “Czech Bank iD is deeply embedded in how Czech citizens already access banking, government, and private sector services. For our clients, adding Czech Bank iD is not just an onboarding improvement. It is a direct connection to one of Central Europe’s most established digital identity networks,” added Domantas Ciulde. Czech Bank iD support is available now across iDenfy’s identity verification platform.

Xtract One Technologies announces multiple SmartGateway deployments across California healthcare facilities, reflecting growing demand from health systems across the state ahead of the March 2027 compliance deadline for California Assembly Bill 2975. Deployments are underway at Hazel Hawkins Memorial Hospital in Hollister and Contra Costa Health in Martinez, with expected completion by mid-August, in addition to the previously reported San Mateo Health deployment. AB 2975 requires hospitals across California to implement enhanced security measures at high-traffic public entrances by March, 2027. The mandate reflects a broader recognition among healthcare administrators and state regulators that emergency departments and other public-facing hospital entrances require dedicated screening to protect staff and patients from weapons-related violence. Real procurement decisions "California health systems are making real procurement decisions right now, and the facilities selecting Xtract One are doing so because the technology fits the environment," said Peter Evans, CEO of Xtract One. "SmartGateway was built for high patient and visitor volumes, diverse populations, and clinical staff who need to focus on care. What we're seeing across Hazel Hawkins, Contra Costa Health, and San Mateo – and more broadly with healthcare systems in general – is that once an organisation sees accurate, high-throughput detection running in a real hospital environment, expanding the solution across the facility becomes an obvious next step." Divesting personal items Xtract One's presence in California healthcare predates the AB 2975 mandate. San Mateo Medical Center deployed SmartGateway at its main campus in 2025 following extensive testing of available solutions, with plans to expand to all satellite clinics. The Hazel Hawkins and Contra Costa Health deployments build on that established footprint as health systems across the state accelerate their procurement timelines ahead of the March 2027 deadline. Xtract One's SmartGateway is designed specifically for high-throughput environments with lower volumes of personal belongings. The system identifies concealed guns and knives while allowing individuals to walk through at a natural pace without divesting personal items, distinguishing it from traditional walk-through metal detectors that alert broadly on any metal object. For healthcare environments where speed and accessibility are critical to patient care, that distinction matters. Emergency department entrance The first of three initial SmartGateway systems is now operational at Hazel Hawkins Memorial Hospital's emergency department entrance, the hospital's main entrance, and the labour and delivery wing. "Our emergency department sees the most public foot traffic of any entrance we have, which makes it the right place to start," said Jorge Ramirez, Director of Emergency Management and Security at Hazel Hawkins Memorial Hospital. "Reducing the risk of violence against our staff, our patients, and our visitors is the goal behind every part of this rollout." Weapons-related incidents "This deployment gives our team the ability to screen for weapons without slowing down the emergency department or changing how patients and staff experience our facility. That balance mattered to us throughout the evaluation process," said Dale Fors, Manager of Security at Hazel Hawkins Memorial Hospital. The hospital noted that the new security measures are being implemented to meet the requirements of the state mandate rather than in response to any specific increase in weapons-related incidents at the facility. Possible security posture Contra Costa Health has also selected three SmartGateway systems for deployment across its main entrance, emergency department, and psychiatric entrance in the primary hospital facility. The deployment is driven by a clear security mandate of detecting and intercepting firearms and bladed weapons before they reach clinical environments. Contra Costa Health has prioritised detection accuracy above all other operational considerations, implementing a bag check protocol alongside SmartGateway screening at its main entrance to ensure the most thorough possible security posture across all three entry points.