News
Advisory
Hardware Lab
Career
Products
EXPLIoT CloudFuzz

IoT Security Assessment

Securing the connected world.

We are at the front line of IoT security research & proud owners of expliot.io. We understand the IoT ecosystem inside out. In the last 8+ years, Payatu has performed, security assessment of 100+ IoT product ecosystems.

IoT Security Assessment

Extensive/comprehensive testing of all aspects of IoT

  • ✔ Physical

    I2C, SPI, UART, GPIO

  • ✔ Radio

    Wifi, Bluetooth, GSM, GPRS, GPS (susceptible to radio-based attacks)

  • ✔ Remote

    Web application, Web Service, Mobile Application, and Cloud Infrastructure from the Internet.

We have identified eight critical elements of the IoT product ecosystem that needs to be cover during the security assessment/audit process

Our Methodology

Our methodology takes into consideration the industry-wide projects looking at the most commonly vulnerable areas of the application deployments, considering the OWASP top 10 and Web Application Security Consortium.

  • Initial Reconnaissance
  • Meeting with Developer/SME
  • Attack Surface Identification
  • Threat Modeling
  • Protocol Endpoints
  • Cloud Pentest
  • Mobile App Pentest
  • Firmware RE + Vulnerability Analysis
  • Fuzzing Protocol Endpoints
  • Hardware vulnerability analysis
  • Reporting
  • Mitigation Proposal

GET STARTED

Get to know more about our process, methodology & team!

Close the overlay

I am looking for
Please click one!

☷ All Blogs ›  ✍ Latest Blogs

kartheek.lade
30/11/2021

Automotive Security - Part 4 (what is OBD-II ?)

Welcome back! I hope you have gone through the previous blogs, where we discussed about “CAN Bus protocol”. In this blog we will look into OBD-II which is Goto option for diagnostics in vehicles a...
prateek.thakare
18/11/2021

Broken Access Control: Pentester's Gold Mine

Hey folks, hope you all are doing well! Recently OWASP Top 10 2021 was released and the Broken Access Control grabbed the first position with the most serious security risk. Broken Access Control issu...
kartheek.lade
02/11/2021

Automotive Security - Part 3 (Intro to CAN Bus Protocol - 101)

Welcome back! I hope you have gone through the previous blogs, where we discussed about “Automotive Security introduction” & “Automotive Attack Surface”. In this blog we will look into one of ...

☷ All News ›  ⚑ Latest News

Workshop, Online
12-December-2021

Kartheek Lade will be conducting a workshop on “Car Hacking.”
Workshop, Online
11-December-2021

Hari Prasad and Arun Nair will be conducting a workshop on “Laternal Movement Techniques.”
Webinar, Online
26-November-2021

Appar Thusso will be delivering a webinar on “Medical Device Security: The Good, the Bad and the Ugly.”