A new Cloud Security Assessment Tool to help electric vehicle charging operators and manufacturers evaluate and secure their cloud-connected infrastructure is now available from Versinetic.

The tool provides a checklist-based approach for identifying cybersecurity vulnerabilities in charging networks.

Available free of charge, the assessment can be used by operators, manufacturers and local authorities as part of supplier evaluations, procurement exercises and internal security reviews.

The launch comes as local authorities continue to deploy charging infrastructure through programmes such as the Local EV Infrastructure (LEVI) fund, placing greater emphasis on supplier due diligence and long-term operational resilience.

As EV networks scale across the UK and Europe, organisations must look beyond physical hardware. Security evaluations must now encompass cloud platforms, customer data environments, and supporting operational systems.

Recent cybersecurity incidents affecting the sector have reinforced the importance of cloud security and highlighted the need for greater scrutiny around cybersecurity, compliance and procurement due diligence as charging infrastructure becomes more widespread and interconnected.

Versinetic’s new 24-point self-assessment streamlines this process, targeting four critical areas: compliance, architecture, operations and governance.

The assessment targets common vulnerabilities within cloud-connected charging environments. Key focus areas include inadequate data separation, weak remote access controls, gaps in certificate management, and poor incident response readiness.

The new tool also helps organisations review their readiness for evolving security requirements, including the transition towards TLS 1.3 and future ISO 15118-20 ecosystems, which will place greater emphasis on certificate management and authenticated communications.

Dunstan Power, managing director at Versinetic, said: “Procurement teams have become very good at comparing charging speeds, hardware specifications and commercial models. What is often less clear is how to assess the security of the cloud platforms sitting behind those networks.

“Questions around data segregation, access controls, certificate management and incident response are becoming increasingly important, yet they don’t always form part of the procurement conversation. We developed this assessment to help organisations ask those questions earlier and more consistently.”

The initiative reflects growing attention on cybersecurity standards and regulatory requirements, including the UK’s Smart Charge Points Regulations 2021, ETSI EN 303 645, OCPP 2.0.1 security profiles and emerging TLS 1.3 requirements within future EV charging ecosystems.