What We Do
Four ways we help organizations understand and harden the hardware layer of their OT environments.
Hardware & Firmware Assessments
We extract, analyze, and report on the security posture of firmware and hardware in your OT devices. Every engagement delivers a vulnerability inventory with CVSS scoring and a remediation roadmap.
Adversarial Research & Red Teaming
We simulate advanced persistent threats against your OT environment, with emphasis on firmware persistence and hardware implant techniques.
Research & Development Partnerships
We execute contracted research programs for government agencies and corporate innovation labs, producing prototypes and publishable findings under SBIR, STTR, and OTA vehicles.
Advisory & Strategic Consulting
We review OT security architecture, design supply-chain security programs, and map regulatory compliance for brownfield deployments.
Engagement Models
Project-based
Fixed-scope engagements for a defined device class or system, from scoping to final report.
Retainer
Ongoing quarterly assessment programs for organizations with continuous OT deployment cycles.
Partnership
Multi-year research and development programs with government agencies and innovation labs.
FAQ
How long does a typical assessment take?
A standard firmware assessment of 5–10 devices takes 4–6 weeks from scoping to final report. Complex engagements with reverse engineering or hardware analysis may extend to 8–10 weeks.
Do you work on live production systems?
No. We require isolated test environments or firmware images provided by the client. We do not perform testing on systems that are actively controlling physical processes.
What devices can you analyze?
We analyze PLCs, HMIs, RTUs, industrial Ethernet switches, edge devices, and embedded controllers. If you have a device not on this list, contact us to discuss feasibility.
How do you handle vulnerability disclosure?
We follow a 90-day coordinated disclosure timeline by default. We notify the affected vendor, provide technical details, and publish our findings after a patch is available or the timeline expires.
What is your pricing model?
We offer fixed-scope pricing per device class, time-and-materials for complex engagements, and quarterly retainers for ongoing programs. Specific pricing is provided after scoping.
Discuss your needs with our research team.
Discuss your needs