Advisory
Inside Our Responsible Disclosure Process
How we work with vendors from first contact to public advisory, and why the timeline matters as much as the finding itself.
Read article
RESEARCH BLOG
Write-ups & Insights
Field notes from our engagements, disclosure practice, and the embedded security landscape.
Research
Why Firmware Extraction Still Matters in 2026
Secure boot and code signing are everywhere now, yet firmware extraction remains the fastest path to understanding real device risk.
Read article
Industry Insight
ISO 21434 and the Real Automotive Attack Surface
TARA documents often look complete on paper. The gap between a compliant threat model and a road-ready one usually lives in the details.
Read article