Security testing of operational technology, industrial control systems, connected devices and their firmware.
Testing a connected device and its ecosystem, from hardware interfaces and radio to companion app and cloud API, using the OWASP ISTG and checking against ETSI EN 303 645 baseline provisions; useful ahead of Cyber Resilience Act obligations.
Assessment of industrial control environments planned around safety and uptime: architecture and zone review against ISA/IEC 62443, passive discovery, configuration review and carefully limited active testing, mapped to ATT&CK for ICS.
Static and dynamic review of device firmware following the nine OWASP FSTM stages: extraction, hardcoded credentials and keys, outdated components, update integrity and emulated testing, without needing the device on a production network.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.