01 · Define device & objective
Agree the device model, firmware, research objective and authorized methods together.
Hardware and firmware reverse engineering.
What is inside the devices your business relies on? I investigate commercial routers, appliances and their firmware for previously unknown vulnerabilities. You receive reproducible findings and support with reporting them to the vendor.
Separately commissioned device research. Pricing on request.
From the enclosure to the firmware.
Reverse engineering helps establish how a device works. Within the agreed scope, I investigate firmware and interfaces for previously unknown vulnerabilities (zero-days).
The device, firmware version and your specific questions shape the investigation. Before work begins, we agree which systems and methods are authorized and what limits apply. Finding a vulnerability is not guaranteed.
A clear brief. Findings you can act on.
You speak directly with the engineer handling the investigation. We define the research question, arrange a suitable test setup and discuss the results with your team.
02 · Prepare the test setup
Arrange a test device, loan unit or isolated test environment. We agree the effort and any additional costs before starting.
03 · Investigate & document
Investigate firmware and interfaces, document substantiated findings with evidence and assess their impact.
04 · Coordinate vendor reporting
Report discovered vulnerabilities to the vendor on your behalf or through your existing support program.
From findings to the next step.
A technical finding needs to reach the right person. I document the results so they can be reproduced and coordinate vendor reporting with you. Your team receives a basis for further discussions with support and the vendor.
Device research and recurring external pentests investigate different targets. Reverse engineering is a separate engagement and is not included in pentest packages.
Your device determines the effort.
Pricing on request. The device, firmware, complexity and research objective determine the quote. We agree the test setup, any additional costs and the project start with you personally.
Your inquiry is non-binding. The quote records the agreed scope and terms.