Observed arrival · 2026-09-30
Trustwedge’s wallet trust-chain tests
Trustwedge offers penetration testing and advisory services for European digital identity wallet flows, verifiers, and integrations.
- For
- Wallet verifiers, identity providers, banks, and payment firms
- Worth noticing
- The two-week audit checks signature verification, nonce and audience binding, trust-list fail-closed behavior, revocation, and over-asking.
Field notes
The service menu separates a short audit from a deeper identity-path test, integration advisory, and an ongoing assurance retainer. The shorter audit lists checks for signatures, nonce and audience binding, trust-list behavior, revocation, and over-asking; the longer engagement names OpenID4VP, SD-JWT VC, mdoc, and COSE/JOSE. Trustwedge says its advice does not include building the integration, and presents its 15+ years of eID, KYC, and AML experience as a company claim.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue