Fime Acquires Red Alert Labs to Scale Cybersecurity Compliance Automation

Fime has acquired Red Alert Labs to integrate cybersecurity evaluation and compliance automation into its existing suite of payment and digital identity services. For fintech professionals, this move signals a shift toward unified trust infrastructures as regulatory pressures like the Cyber Resilience Act force a convergence between security, interoperability, and long-term product compliance.

What was announced

On September 15, 2026, Fime confirmed the acquisition of Red Alert Labs, a move designed to transition the firm into a global Digital Trust Provider. The acquisition incorporates Red Alert Labs’ cybersecurity evaluation and certification expertise into Fime’s established operations in payments, smart mobility, and digital identity. Central to the deal is the CyberPass compliance automation platform, which allows manufacturers to assess and improve their compliance readiness while enabling certification schemes to industrialize their assessment processes at scale.

The timing of the acquisition is tied to significant shifts in the European regulatory landscape. Reporting obligations for the Cyber Resilience Act (CRA) began on September 11, 2026, with the main obligations of the Act set to take effect from December 11, 2027. Under these rules, manufacturers are required to demonstrate cybersecurity compliance not only at the point of product launch but throughout the entire lifecycle of the technology. The combined entity aims to support customers through the full lifecycle, from initial advisory and security-by-design phases to implementation, testing, and continuous assurance.

Red Alert Labs will maintain its technical autonomy and accreditations, operating as an independent laboratory under the new identity: Red Alert Labs, cybersecurity by Fime. Roland Atoui, the founder of Red Alert Labs, will continue to lead the unit while taking on an expanded scope that encompasses Fime’s broader security activities on a global scale. This structure is intended to preserve the specialized reputation of the lab while leveraging Fime’s international reach.

"Our ambition is to make Fime a global Digital Trust Provider. For more than three decades, we have helped build trust in payments, and we have extended that expertise into digital identity and smart mobility. Cybersecurity is the next natural step. These markets are converging: customers increasingly need to prove not only that a product works and interoperates, but that it is secure, compliant and remains trustworthy throughout its lifecycle. Red Alert Labs brings us world-class cybersecurity expertise together with a platform approach that will help us deliver that trust at scale."

Lionel Grosclaude, CEO of Fime.

The companies involved

Fime is a prominent player in the testing and certification industry, with a history spanning over thirty years. While it established its reputation in the payments sector, the company has increasingly focused on the intersection of biometrics, digital identity, and smart mobility. Lionel Grosclaude, the CEO of Fime, also serves as a Mentor at ESSEC Business School. The company has a significant presence in the market, providing the testing and assurance platforms necessary for digital products to scale securely across different geographies.

Red Alert Labs is a specialized cybersecurity laboratory that focuses on the security of connected devices and IoT ecosystems. The firm is known for its accredited evaluation services and its proprietary CyberPass platform, which automates complex compliance workflows. Roland Atoui, the founder and Managing Director of Red Alert Labs, has positioned the company as a provider of scalable and continuous cybersecurity assurance. By joining Fime, the lab gains access to a wider global infrastructure while continuing to operate as an independent entity to protect the integrity of its certifications.

What FF News has reported before

FF News has closely followed Fime’s expansion into the digital identity and automated trust sectors throughout 2026. In June, the company achieved a significant milestone in North America when Fime Became the First DIACC-Accredited Auditor in Quebec, strengthening digital ID trust in Canada. This followed an earlier move where Fime Secured MOSIP Accreditation to bolster its global biometric testing capabilities.

The firm has also been active in standardizing emerging technologies, having recently Launched an mDL Certification Scheme to streamline the deployment of global digital wallets. Furthermore, Fime addressed the growing complexity of autonomous systems earlier this year when it Launched FACT, which serves as a trust layer specifically designed for agentic commerce.

What this means

This acquisition highlights a critical pivot in the fintech sector: the end of security as a siloed function. As payments and digital IDs merge into unified mobile wallets, "interoperability" is no longer a sufficient metric for success; "continuous assurance" is the new industry benchmark. The market is under immense pressure from the Cyber Resilience Act, which shifts the burden of proof from a one-time launch certificate to a lifetime of compliance. Legacy testing firms that cannot automate this process via platforms like CyberPass will likely struggle to keep pace. The move places competitors in the certification space under pressure to provide end-to-end security-by-design services rather than just final-stage testing.