Skip to content
HelleboreSecurity
All services

Service

IoT & Embedded Device Security

Connected products extend your attack surface into the physical world. We look at the whole device ecosystem: hardware interfaces, firmware, wireless protocols, cloud backends and mobile companions.

Discuss this service

What we cover

  • Hardware debug interfaces (UART, JTAG, SWD) and storage extraction
  • Firmware analysis, secure boot and update mechanisms
  • Wireless protocols: BLE, Wi-Fi, Zigbee, LoRa and sub-GHz
  • Device-to-cloud communication and companion apps

How we test

  • 01Teardown and interface identification
  • 02Firmware extraction, reverse engineering and static/dynamic analysis
  • 03Protocol analysis and fuzzing
  • 04Review against ETSI EN 303 645 and OWASP IoT guidance

What you receive

  • Findings across hardware, firmware, radio and cloud layers
  • Risk ratings that account for physical access requirements
  • Engineering-level remediation guidance
  • Support preparing for EU Cyber Resilience Act expectations

A good fit for

Manufacturers and operators of connected devices in industrial, energy, automotive and consumer settings, where device integrity affects the services that depend on them.

Let's talk about what you need to protect.

Tell us a little about your environment and goals. We'll reply with questions, a suggested scope, or an honest note if we're not the right fit.

Contact us