IoT & OT Security Testing

Coffee machines, ticket machines, and refrigerators are connected to the internet. Even dolls and toothbrushes now use cloud services and can only function fully when connected. In industrial environments, too, more and more machines and devices are being connected (IIoT). This makes it all the more important to check the security of devices that are directly or indirectly connected to the internet.
Oneconsult can provide support at all levels, from reviewing concepts, architectures, and processes to IoT device penetration tests. If fundamental problems are identified at an early stage of development, improvements can be implemented without significant additional effort. It is therefore advisable to subject concepts and architectures to a security review at an early stage. Particularly in the case of fundamental processes such as enrollment, authentication, or updates, security vulnerabilities can only be remedied with considerable effort after implementation. Oneconsult can also check the configuration of devices or your (cloud) infrastructure. When developing firmware, both the development and deployment processes and the actual artifacts such as firmware images and security-relevant areas of the source code can be subjected to a security review. Other components of an IoT solution, such as mobile apps, web applications, or (customer) APIs, should not be forgotten, as they represent the public face of the company and are therefore as prominent as they are vulnerable.