NGRAVE
Best for verifiable firmware openness
How it rates
- Firmware source published in a public repository
- Device security or specification page published
- Technical documentation reachable without an account
- No dedicated security or audit disclosure identified at this check
- Terms page not found at the conventional address at this check
Each indicator scores 2, 1 or 0. A pillar is the points earned over the points available; the overall score is the weighted sum. Every source below is public — check any of them yourself.
- MetFirmware source published in a public repository
Vendor repository reachable at this check.
github.com/ngrave - MetDevice security or specification page published
Security or specification page reachable at this check.
www.ngrave.io/zero - Not metIndependent security research or audit programme published
No published security research or audit programme identified at this check.
- MetTechnical documentation reachable without an account
Documentation open at this check.
www.ngrave.io/zero - MetVendor organisation identifiable from the repository
Repository published under the vendor organisation (NGRAVE).
github.com/ngrave
- Met
- Met
- Not metLegal or terms page public
Not found at the conventional address at this check.
- Met
- MetPurchase information viewable without an account
No account required to reach the shop at this check.
www.ngrave.io/
- Met
- Met
- Met
- MetDocumentation site separate from marketing
Dedicated documentation or support resource published.
www.ngrave.io/zero - Met
- Met
- Met
- Not metSecurity or disclosure page published
Not identified at this check.
- Not metTerms or legal documentation published
Not found at the conventional address at this check.
- Met
- Met
- Met
- Met
- Met
- Not metLegal documentation reachable
Not found at the conventional address at this check.
The only crypto hardware wallet certified to EAL7, fully air-gapped, with key generation from physical entropy and an encrypted steel backup plate.
Our assessment
NGRAVE ZERO is the only crypto hardware wallet certified to EAL7, the highest level in the Common Criteria scheme and one that requires formal mathematical verification rather than testing alone. It is fully air-gapped — no USB data, no Wi-Fi, no Bluetooth, no NFC — with all communication by QR code.
What EAL7 actually means
Most premium wallets in this table cite EAL5+ or EAL6+. EAL7 requires the security design to be formally verified, which is a categorically different exercise from passing penetration testing. It applies to the certified component rather than to the whole product, and it does not make a device unbreakable — but no competitor here can claim it.
Key generation from physical entropy
Setup derives the seed from multiple physical sources: a fingerprint, ambient light captured through the camera, and internal sensors. The purpose is to avoid depending solely on a software random number generator, which is historically where wallet key generation goes wrong — quietly, and without anyone noticing until funds move.
The backup is part of the product
The GRAPHENE steel plate stores the key in an encrypted, split-plate form rather than plain words, so finding the plate is not the same as finding the key. It is fireproof, waterproof and corrosion-resistant. No other mainstream vendor ships an encrypted steel backup, and it addresses the most common failure in self-custody.
Who it suits
NGRAVE fits holders of large balances who want maximum certified assurance and an encrypted physical backup, and who accept a price several times that of the category. For most portfolios a Trezor, BitBox or Coldcard delivers the security that actually matters at a fraction of the cost.
How rivals compare
| Service | Score | Best for | |
|---|---|---|---|
| Trezor | 9.9 | verifiable firmware openness | Read → |
Frequently asked
Does this score mean NGRAVE is secure?
No. It measures what a buyer can verify before purchase: published firmware source, documented security claims, and open documentation. Physical security is not tested by us and is not scored.
Why does firmware openness matter so much here?
It is the one substantive security property an outsider can check without specialist equipment. Everything else on a hardware wallet requires trusting the vendor or a third-party teardown.
What would raise this score?
Publishing firmware source, a dedicated security or audit page, and open technical documentation at stable public addresses — all of which are checkable by anyone.