Product

Speedy deployment

Integrating the Widevine Content Decryption Module (CDM) is an important step before deploying custom hardware or software for secure streaming, but achieving approval can delay a timely market launch. 

Our expert technical support and verification accelerates Widevine CDM certification and VMP turnaround time!

Service

Trusted security partner

As highly experienced content protection specialists, Google selected us as a Third Party Labs (3PL) partner to certify Widevine CDM implementations and sign VMP certificates on their behalf.

OEMs and SoCs can gain Widevine CDM certification approval for Android Open Source Project (AOSP) and Linux device platforms.

Complete Widevine L1 and L3 security level validation for protected SD, HD, UHD, and HDR streaming.

Deploy Widevine with popular frameworks including Chromium, Electron, and Firefox to create custom browsers and apps that securely stream. 

Widevine
Certified Widevine Implementation Partner

Devices

Rapid device approval

Working closely with Google, we conduct independent testing and compliance verification to quickly get your hardware ready for launch. Our experts support you through the entire process, including:

  • Registering devices with Google
  • Widevine CDM testing guidance & compliance assessment 
  • Acquiring keyboxes for testing and provisioning
  • Integration assistance

Start with our device survey

We’ll be in touch to discuss details and next steps for your quick device certification.

Take the questionnaire

Browsers & apps

Fast VMP browser & app signing

Publishing custom Windows or macOS apps that can play DRM-protected media? We’ll quickly help you with Verified Media Path (VMP) signing – allowing popular video and audio services to stream through your app. 

Contact us to get started

You can also start with our free Electron build for content security which includes the Widevine CDM and is pre-approved by Google to use our VMP self-signing portal.

Supported frameworksChromium, Electron, Firefox
CDM compliance audit
We’ll review your app for compliance to access VMP signing.
Yes
Instant VMP signing
Previously, license agreements with Google were required to obtain signing certificates which face lengthy delays – but you’ll skip the wait with our instant-signing service.
Yes
Support premium VOD/live streaming
Deploy custom video players and browsers meeting content provider security requirements.
Yes
Low-costYes

testimonial

It has been delightful to work with Castlabs for getting Widevine L1 CDM certification for many models among our Z10 and Z11 series. The biggest challenge that we always had is getting things done on schedule. We chose Castlabs because response was always fast.

Huns Kim Deputy Sales Manager

FAQs

Need some clarification?

Check out common topics we’re asked, or let us know if you have other questions.

As demand for Widevine-enabled devices and apps is high, Google introduced a Third Party Labs (3PL) program to enable fast and scalable certification. This program authorizes trusted partners like us to assist with Widevine implementations and compliance approval on Google’s behalf. 

All premium streaming platforms (for example: Netflix, Amazon Prime Video, Disney+, Apple TV+, Hulu, Crunchyroll, etc.) protect their movies and shows with Digital Rights Management (DRM) technology. As an extra security precaution, these services often also perform a VMP check before DRM licenses are delivered to certain platforms. If the check isn’t successful, playback won’t be possible because DRM licenses won’t be delivered. For custom desktop browsers, the most common cause for this is not having the app environment signed as a VMP. 

The VMP is a security layer included within an app that authenticates the software interacting with Widevine’s CDM, ensuring media is processed only by trusted components. By verifying that the app environment and plugins haven’t been modified in a way that could compromise content protection, VMP prevents unauthorized decrypted video capture or manipulation. In other words, it restricts playback to compliant environments ensuring media delivery occurs along a protected source-to-display path.

When building desktop browsers or apps that use Google’s Widevine DRM, it’s strongly recommended to include the VMP. Many premium content streaming services will deny DRM license requests if a VMP isn’t present, meaning media playback isn’t possible. 

Yes! Discover our scalable DRMtoday cloud solution.