BUGFOXHardware Security

Hardware Security

HardwareSecurityStarts Here

We break IoT devices, firmware and silicon so the people shipping them don't have to find out the hard way.

bugfox@lab — /opt/riglive
bugfox@lab:~$ 
FIRMWARE EXTRACTIONJTAG / SWDBLE & ZIGBEESIDE-CHANNELFAULT INJECTIONSECURE BOOTRF REPLAYSPI FLASH DUMPOTA SECURITYRED TEAMING
FIRMWARE EXTRACTIONJTAG / SWDBLE & ZIGBEESIDE-CHANNELFAULT INJECTIONSECURE BOOTRF REPLAYSPI FLASH DUMPOTA SECURITYRED TEAMING

01Services

What we take apart

Hardware, firmware, web and radio. Every engagement is scoped to the device you actually shipped, and written up so your engineers can act on it.

Hardware Security

Hardware assessments, firmware analysis and UART / JTAG / SPI interface testing on real silicon.

  • Hardware Security Assessment
  • Hardware Penetration Testing
  • Firmware Security Analysis
  • UART / JTAG / SPI Interface Analysis
  • Secure Boot & Firmware Review
Learn more

Web Application Security

Full-scope web application penetration testing, secure code review and vulnerability assessment.

  • Web Application Penetration Testing (WAPT)
  • Secure Code Review
  • Vulnerability Assessment
  • Security Consulting
Learn more

API Security

REST and GraphQL API testing, authentication and authorization review, and vulnerability assessment.

  • REST API Security Testing
  • GraphQL API Security Testing
  • API Authentication & Authorization Review
  • API Vulnerability Assessment
Learn more

04Events

On the bench

Workshops, webinars and bootcamps run in small groups on real hardware. Seats are limited and go quickly.

22

Aug

In person

Sat, 22 Aug 2026 · 2:30 PM – 6:00 PM

Hardware Hacking Live

A hands-on evening pulling apart consumer IoT devices — UART discovery, flash dumping and firmware triage on real hardware.

Bugfox Lab, Kolkata

₹1,4997 seats left

4

Sep

Online

Fri, 4 Sep 2026 · 6:00 PM – 7:15 PM

Threat Modeling for IoT Teams

A free online session on building a threat model that survives contact with a real product schedule.

Free143 seats left

19

Sep

Sold out
Hybrid

Sat, 19 Sep 2026 – 20 Sep 2026

Red Team Hardware Bootcamp

Two days of physical access attacks: implants, badge cloning and the RF paths defenders forget to watch.

Bugfox Lab, Kolkata

₹8,999

// Ready when you are

Let's break it before they do 

Tell us about your device, your firmware or your deadline. We will scope an assessment that actually fits.