MASA assurance levels classify the security of an application based on the confidence that it complies with MASA requirements. Higher assurance levels indicate greater confidence in the implementation of required MASA controls. MASA offers two distinct assurance levels: AL1 and AL2. All requirements must be satisfied for every level. The only difference between each level is the assessment method that applies.
| Level | Name | Estimated Lab Hours | Cost | Description |
AL2 |
Lab Evaluation | 32 | $3,000 to $6,000 | During this assessment, the authorized lab will thoroughly test and validate compliance with all MASA requirements through a manual review process. |
| AL1 |
Verified Self Attest | 8 | $500 | During this assessment, the authorized lab will scan the application and provide a questionnaire to the developer to complete self-declarations and provide evidence. |