Penthertz
What we test

Bluetooth and BLE security

We test the Bluetooth in your products and deployments: pairing, GATT services, and the assumptions devices make about a paired peer.

Work with us Our research on it

What an attacker could do

We check it before they do, with the same equipment.

Pair or hijack

Abuse weak pairing to connect to a device that should have refused.

Control it

Write to GATT characteristics that are not authenticated.

Track it

Follow a device by its Bluetooth identifiers.

Break trust

Exploit a device that trusts anything already bonded.

What we test

  • BLE and classic Bluetooth in your products
  • Pairing and bonding modes
  • GATT services and characteristics
  • Companion apps and their link to the device
  • The Bluetooth stack itself, BLE and classic: we hunt for the bugs an attacker could use to crash or take over a device, even before pairing

How to work with us

Security auditA review of your architecture and implementation against radio and embedded attacks, including the security requirements of the… CRA & RED readinessFor manufacturers of radio and connected products: we test your product against the cybersecurity requirements of the Radio… Penetration testWe test your system the way an attacker would: from outside, over the air or directly on the… Vulnerability researchIn-depth research on a target you choose: protocol fuzzing, baseband analysis and CVE-grade findings, fully documented and disclosed…

Our contributions and posts

Talks, articles and CVEs on this subject.

All publications
2026Blog

Unitree Robots Under Fire
2026Blog

BLERP: BLE Re-Pairing Attacks and Defenses

Trainings on this subject

All trainings
Red Team OTA: Physical Intrusion Systems
Red team
Live 3 days, Intermediate
From 3 660€ / attendee
Red Team OTA: Physical Intrusion Systems

Three days on current attacks against the RFID, NFC, Bluetooth LE, nRF and sub-GHz systems met on pentests and red team engagements, to test access control and the radio links behind it.

RF attack kit with targets included Course outline
Red Team OTA: Physical Intrusion Systems

Talk to us about your project

We scope the work in a first call, then send a fixed-price proposal: intrusion tests, vulnerability research, fuzzing, test benches, trainings. Offices near Paris, Monday to Friday, 9:00 to 19:00.

Work with us