A program that analyses products to determine whether their security architecture and cryptographic algorithms have been implemented correctly and are strong enough for the products intended use.