Know exactly how exposed your radio links and devices are
Five types of engagement. If none matches your situation, we work it out in the scoping call. The quote comes after scoping, and it is fixed.
Pentest & Red Team
We test your system the way an attacker would: from outside, over the air or directly on the hardware, without credentials you haven't given us. Then we walk your engineers through each step we took.
For systems that are already built or deployed.
Scope a pentest- Wireless and OT penetration testing
- Exotic communications, satellite and proprietary radio links
- Physical intrusion over the air
- Automotive: V2X, V2G charging, GPS and vehicle buses
- Drones: reconnaissance, hijack and aerial RF assessment
- Adversary simulation against a real objective
- Hardware attacks: side-channel analysis and fault injection
Security Audits
A review of your architecture and implementation against radio and embedded attacks, including the security requirements of the Cyber Resilience Act (CRA) and NIS2, with fixes your team can fit into the release you are already planning.
For product teams before a release or a certification, and for companies preparing for NIS2 or the CRA.
Scope an audit- Architecture and threat-model review
- Firmware and bootchain review
- Hardware inspection and port discovery
- Radio configuration and provisioning review
- NIS2 and CRA compliance support
CRA & RED readiness for radio products
For manufacturers of radio and connected products: we test your product against the cybersecurity requirements of the Radio Equipment Directive (EN 18031) and the Cyber Resilience Act, help your team fix what fails, and prepare the technical evidence.
For manufacturers of radio and connected products sold in the EU.
Discuss your product- EN 18031-1, -2 and -3 assessment for the RED
- Cyber Resilience Act requirements review (Annex I)
- Radio, firmware and hardware testing of the product
- Review of your vulnerability handling and reporting process
- Technical evidence for your file
Vulnerability Research
In-depth research on a target you choose: protocol fuzzing, baseband analysis and CVE-grade findings, fully documented and disclosed the way you decide.
For vendors and operators who want in-depth work.
Discuss a research scope- Protocol and stack fuzzing
- Baseband and modem analysis
- Reverse engineering of proprietary radio
- Exploit development where it is warranted
R&D & Tooling
Custom SDR tools, test benches and secure-development advice, built on the same stack as RF Swift so your team can keep using them after the project.
For teams building their own testing capability.
Discuss your R&D needs- Custom SDR tool development
- Testbed and lab construction
- Secure development consulting
- Knowledge transfer to your engineers
Talk to us about your project
We scope the work in a first call, then send a fixed-price proposal: intrusion tests, vulnerability research, fuzzing, test benches, trainings. Offices near Paris, Monday to Friday, 9:00 to 19:00.