The WatchGuard company announces the inclusion of WatchGuard AuthPoint, its multi-factor authentication (MFA) solution, in the CPSTIC catalog (Catalogue of ICT Security Products and Services) of the National Cryptological Center (CCN), with ENS High category. The catalog includes security products and services qualified by the CCN for use in the Spanish public sector and its supply chain.
Compliance and protection requirements
The addition of WatchGuard AuthPoint comes at a time when identity has become a critical focus of attacks: in public administrations around the world, stolen credentials appear in 59% of hacking-related breaches, according to Verizon’s Data Breach Investigations Report (DBIR) 2026.
The Public Administration is not immune to this pressure and also faces increasing demands for protection and compliance derived from the National Security Scheme (ENS), which obliges the entire Spanish public sector to protect its systems, and from European frameworks such as the NIS2 Directive, which reinforces the security of administrations and their supply chains.
With this inclusion, AuthPoint becomes the only MFA solution from a vendor focused on managed service providers (MSPs) in the portfolio. In practice, this means that town councils, councils and public bodies that outsource the management of their technology can deploy qualified multi-factor authentication, operated by their trusted service provider, without the need to have their own security teams.
WatchGuard AuthPoint secures access to cloud applications, VPNs, computers, servers, and remote desktop sessions with multi-factor authentication, single sign-on (SSO), and phishing-resistant passwordless authentication, all managed from WatchGuard Cloud, a single cloud console whose production infrastructure is ISO/IEC 27001 certified. Administrators, whether internal IT teams or MSPs, configure which authentication methods and policies apply to each resource, group, and use case.
The AuthPoint qualification expands WatchGuard’s presence in the catalogue, where its endpoint security solutions have been qualified with the ENS High category for years. With AuthPoint, the company extends that journey from endpoint to identity.
The CPSTIC catalog includes products approved for the management of classified information and products qualified for the management of sensitive information in the Public Administration.
“Local administrations have been in the background for the cybersecurity industry for years: manufacturers built for large corporate budgets, not for their specific needs. That AuthPoint is in the CPSTIC catalog changes that: the Spanish administration, at any level, can now protect identity with the same enterprise-level guarantees that it already demands for the rest of its security, through the channel that manages its technology on a day-to-day basis,” says Mick McCarter, Product Director of Zero Trust Access at WatchGuard Technologies.
The National Cryptological Center (CCN), attached to the CNI, is the body responsible for guaranteeing the security of information technologies in the Administration. The CPSTIC catalog includes products approved for the management of classified information and products qualified for the management of sensitive information in the Public Administration. The AuthPoint entry can be found in the CPSTIC catalogue.
