Find the wireless and hardware flaws a classic pentest misses, before attackers do
Radio links and the electronics inside your products escape a classic pentest. We test them: Wi-Fi, Bluetooth, RFID, LoRa, 2G to 5G networks, satellites, vehicles and embedded hardware. We also help with NIS2 and CRA compliance.
What we test
What an attacker with a radio or a screwdriver could do. We check it before they do.
- 2G to 5G networks Fake a base station, reach the core
- Wi-Fi Get onto your network from the car park
- Bluetooth Pair with, track or control a device
- RFID and NFC Clone a badge and walk in
- Sub-GHz and LoRa Replay a remote, spoof a sensor
- Satellite and drones Take over control or video links
- Vehicles Unlock, start, attack V2G charging, spoof GPS
- Hardware Pull firmware and keys from the chip
Where to start
- I build a connected or radio product Tests and evidence for the Radio Equipment Directive (EN 18031) and the Cyber Resilience Act CRA & RED readiness
- I run a mobile network, private 5G or radio infrastructure Tests from a rogue phone or a fake base station, up to the core Penetration tests
- I protect a site or critical systems (NIS2) A red team over the air: badges, alarms, access points, remotes Red team
- I need one component studied in depth Vulnerability research up to CVE, on a protocol, a baseband or a firmware Vulnerability research
- I need my own test bench SDR tools and test benches that your engineers keep R&D and tooling
- I want my team to do it Live and on-demand RF and hardware trainings, hardware kit included Trainings
Where we have trained and spoken
The conferences that host our courses and where we present our research, and the schools where we teach.
Published research and open-source tools
Sébastien Dudek
Founder, trainer since 2009, author of RF SwiftWireless and hardware security specialist. Published research on 5G security, Open RAN, baseband fuzzing, interception and mapping, and power-line communication (HomePlug AV, domestic PLC, electric vehicles and charging stations). Practical work across Wi-Fi, RFID and other wireless systems.
Upcoming trainings and talks
Public trainings open for registration, and our next conference talks.
All trainings| Oct 31, 2026 | Qubes OS Summit 2026RF Swift on Qubes OS: disposable, compartmentalized RF hacking labs, Berlin |
| Nov 16-18, 2026 | Hardwear.io NL 2026SDR Hacking Advanced: reversing and exploiting wireless communications |
| Dec 10, 2026 | Open Source Experience 2026Can Your Cloud Provider Read Your Files? Answer and Open-Source Solution (LUKSbox, talk in French), Paris |
Latest from the blog
All posts
An attacker's playbook built from three recent papers and a Proxmark3, covering keyspace-reduction and relay attacks against MIFARE Ultralight C/AES, NTAG DNA…
How glitching attacks on the Renesas RH850 automotive microcontroller have evolved, from early DIY voltage-glitching rigs to validating the ID-code debug bypass…
A survey of attacks that break STM32 readout protection (RDP), from chip decapsulation and UV light to cold-boot and CPU state tracing,…
Talk to us about your project
We scope the work in a first call, then send a fixed-price proposal: intrusion tests, vulnerability research, fuzzing, test benches, trainings. Offices near Paris, Monday to Friday, 9:00 to 19:00.