WatchGuard Technologies, a global leader in unified cybersecurity for managed service providers (MSPs), announces the inclusion of WatchGuard AuthPoint, its multi-factor authentication (MFA) solution, in the CPSTIC catalog of Spain's National Cryptologic Centre (CCN), with an ENS High category rating. The catalog lists the security products and services qualified by the CCN for use across the Spanish public sector and its supply chain.
AuthPoint's inclusion comes at a time when identity has become a critical point in cyberattacks: in public administration worldwide, stolen credentials appear in 59% of hacking-related breaches, according to Verizon's 2026 Data Breach Investigations Report. Spain's public administration is no exception, facing growing protection and compliance requirements under the Spanish National Security Framework (ENS), which requires every public sector body to protect its systems, and European frameworks such as the NIS2 directive, which strengthens the security of administrations and their supply chains.
With this inclusion, AuthPoint becomes the only MFA solution from a vendor focused on managed service providers (MSPs) listed in the catalog. In practice, this means city councils, provincial governments, and public agencies that outsource their IT can deploy qualified multi-factor authentication, operated by their trusted service provider, without needing in-house security teams.
AuthPoint protects access to cloud applications, VPNs, workstations, servers, and remote desktop sessions through multi-factor authentication, single sig@n-on (SSO), and phishing-resistant passwordless authentication, all managed from WatchGuard Cloud, a single cloud console whose production infrastructure holds ISO/IEC 27001 certification. Administrators, whether internal IT teams or MSPs, configure which authentication methods and policies apply to each resource, group, and use case.
AuthPoint's qualification extends WatchGuard's presence in the catalog, where its endpoint security solutions have held ENS High category qualification for years. With AuthPoint, the company extends that track record from the endpoint to identity.
“Local governments have long been underserved: security vendors built for enterprise budgets and overlooked their unique requirements. AuthPoint in the CPSTIC catalog changes that. Spanish public administration at every level can now defend identity with the same enterprise-grade assurances it already demands for the rest of its security, delivered through the channel that runs its technology day to day,” said Mick McCarter, Zero Trust Access Product Director at WatchGuard Technologies.
Spain's National Cryptologic Centre (CCN), part of the country's National Intelligence Centre (CNI), is the body responsible for information technology security across the Spanish administration. The CPSTIC catalog lists products approved for handling classified information and products qualified for handling sensitive information across Spain's public administration. AuthPoint's entry can be found in the CPSTIC catalog.