Product Cybersecurity
00Services

Three ways we secure connected equipment.

Whether you build the device, build the industrial controller, or run the equipment on your floor, the work starts with evidence, not assumptions.

01

Connected Products

For Manufacturers of IoT and connected consumer, commercial, and automotive devices.

Security evidence for devices that need to reach the market and stay there.

  • EU CRA
  • RED / EN 18031
  • ETSI EN 303 645
  • UK PSTI
  • UN R155/R156
  • ISO/SAE 21434
  • IoT Firmware Assessment

    Pilot · $3,500

    Static firmware analysis, SBOM, triaged findings, and a CRA gap map.

    View pilot
  • Connected Device Assessment

    Scoped engagement

    Assessment of device hardware interfaces, mobile app, and cloud API.

    Discuss scope
  • CRA Vulnerability Handling Readiness

    Scoped engagement

    SBOM process, coordinated disclosure policy, PSIRT workflow, and Article 14 reporting.

    Discuss scope
  • Architecture Review & Threat Modeling

    Scoped engagement

    Threat modeling and security review of product architecture.

    Discuss scope
Explore Connected Products
02

Industrial & OT Products

For Vendors of PLCs, HMIs, industrial gateways, building, refrigeration, and process controllers.

Product security for the equipment that runs physical operations.

  • IEC 62443-4-1
  • IEC 62443-4-2
  • EU CRA
  • IEC 62443-4-2 Component Gap Assessment

    Scoped engagement

    Review component security capabilities against IEC 62443-4-2.

    Discuss scope
  • IEC 62443-4-1 Secure Development Lifecycle Assessment

    Scoped engagement

    Assessment of secure product development lifecycle practices.

    Discuss scope
  • Industrial Device Firmware & Protocol Testing

    Scoped engagement

    Firmware and protocol testing for industrial products.

    Discuss scope
  • Certification Preparation

    Scoped engagement

    ISASecure and CRA conformity evidence preparation.

    Discuss scope
Explore Industrial & OT Products
03

OT Operations

For Manufacturers and facilities that operate connected equipment and rely on vendors and integrators for support.

Know who can reach the equipment your operations depend on.

  • SANS Five ICS Critical Controls
  • IEC 62443-3-2
  • IEC 62443-3-3
  • OT Remote Access & Exposure Review

    Pilot · $2,500

    A focused review of vendor remote access and exposure at one site.

    View pilot
  • OT Exposure Monitoring

    Scoped engagement

    Recurring checks for external and cellular-gateway exposure.

    Discuss scope
  • OT Risk Assessment & Zone/Conduit Design

    Scoped engagement

    OT risk assessment and IEC 62443 zone/conduit design.

    Discuss scope
  • OT Incident Response Tabletop

    Scoped engagement

    A facilitated exercise for OT incident response roles and decisions.

    Discuss scope
Explore OT Operations
04Choose a starting point

Not sure which lane?

Building it and running it are different problems. Many clients need both.

Talk through the scope