What we can do for you.

Work on whole vehicles, individual ECUs and the buses connecting them.

• Black- & white-box penetration testsStructured assessments against a single ECU or a whole vehicle. Typically for OEMs and tier-1 suppliers.
• Firmware reverse engineeringStatic and dynamic analysis of extracted firmware, for security review or to document behaviour on a part you need to integrate with.
• Protocol & interface recoveryReflashing protocols, CAN signal layouts, DBC files, and other undocumented interfaces. For research labs, universities, and aftermarket integrators.
• Secure Onboard Communication (SecOC)Audit SecOC implementation. Check for proper key storage and key distrbution.

Low-level attacks against the chips themselves, and the custom rigs to run them.

• Custom hardware developmentPurpose-built test rigs and adapters. For example a FlexRay gateway, OBD-II dongle, or interface boards for a specific ECU under test.
• Fault injectionTargeted glitching rigs used to recover firmware from locked MCUs.
• Fuzzing at scaleCoverage-guided fuzzing harnesses for embedded firmware and standalone libraries, from ECU stacks to parser code.

Tooling that supports the work, either as one-offs for a single client or as reusable infrastructure you can own.

• Custom reverse-engineering toolsIDA/Ghidra plugins, disassembly frontends and trace recorders.
• Open-source extensionsAdapt the tools we already maintain to your workflow and protocols.