[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-android-pkvm-earns-first-sesip-level-5-certification":10,"sections":40},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":35,"feedback":39,"feedback_at":22,"cost_usd":39,"total_tokens":39},1043,"android-pkvm-earns-first-sesip-level-5-certification","Android pKVM Hits Security Certification Built for State-Level Threats","Google's open-source Android hypervisor is the first consumer-electronics software to earn SESIP Level 5, a bar set for resisting nation-state-grade attacks.","Android's pKVM hypervisor just earned the highest security certification available for consumer-deployed software, a bar more commonly associated with government systems than smartphones.\n\nGoogle's protected KVM, the hypervisor underneath the Android Virtualization Framework, received SESIP Level 5 certification from Dekra, an independent cybersecurity testing lab, evaluated under the TrustCB scheme and the EN-17927 standard. The certification incorporates AVA_VAN.5, the top tier of vulnerability analysis under ISO 15408 Common Criteria, a framework typically reserved for government and military systems. Reaching this level means the software has been evaluated against attackers who are highly skilled, well-funded, and may carry insider knowledge, the profile regulators use to describe nation-state threat actors. Google says pKVM is the first software designed for mass consumer electronics deployment to clear this bar.\n\nThe significance is context-dependent. Most Trusted Execution Environments shipping in Android devices today carry no formal certification or sit at lower assurance levels, leaving developers of high-security applications guessing about the actual guarantees underneath. Google is now mandating that Android device manufacturers use isolation technology meeting this level for security-critical operations, pushing a consistent minimum across the ecosystem rather than leaving each OEM to choose their own bar. pKVM being open-source adds something proprietary alternatives cannot: anyone can audit the code against the certified specification.\n\nSESIP Level 5 is a real, rigorous credential. But \"resistant to nation-state-grade attackers\" is a certification claim, not a promise. The clock starts now.","[\"android\",\"security\",\"open-source\",\"hypervisor\"]","2025-08-12T16:00:00.002Z","2026-06-16T05:59:14.485Z","2026-06-19T13:15:44.473Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Add a clear concluding paragraph or summary sentence to wrap up the article.","resolved","security",[32,30,33,34],"android","open-source","hypervisor",[36],{"name":37,"url":38},"Google Security Blog","http:\u002F\u002Fsecurity.googleblog.com\u002F2025\u002F08\u002FAndroid-pKVM-Certified-SESIP-Level-5.html",0,{"sections":41},[42,47,51,56,61,66,71,76,81,86,91,96,101,106],{"name":43,"slug":44,"count":45,"latest_published_at":46},"AI","ai",2602,"2026-07-18T18:30:00.000Z",{"name":48,"slug":30,"count":49,"latest_published_at":50},"Security",315,"2026-07-17T19:30:00.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Policy","policy",169,"2026-07-17T19:49:53.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Hardware","hardware",126,"2026-07-16T20:09:48.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",94,"2026-07-16T16:29:46.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Software","software",72,"2026-07-17T09:42:05.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Science","science",66,"2026-07-10T10:29:37.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Dev Tools","dev-tools",60,"2026-07-16T16:59:13.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Startups","startups",42,"2026-07-16T16:30:35.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"General","general",29,"2026-07-10T22:28:58.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":107,"slug":108,"count":109,"latest_published_at":110},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]