PICOFAULT
EMBEDDED SYSTEMS SECURITY
RESEARCH LAB
About the lab
IoT/OT Security and Intelligence
We are an independent European lab focused on the attack surface of embedded systems. Our lab specializes in hardware and firmware vulnerability assessments, vulnerability research, reverse engineering and IoT/OT intelligence. We uncover weaknesses so that the devices people rely on can be trusted.
CRA Annex I Security Audits
We help you meet compliance requirements and find vulnerabilities before they put your users or business at risk.
Hands-on security audits for IoT / OT device manufacturers. Discover real vulnerabilities, going beyond automated scanners and false positives.
Capabilities
What we do
Work with us →Firmware Analysis
Systematic manual and automated reverse engineering and vulnerability discovery of firmware and its attack surface: authentication and update mechanisms, exposed services and insecure configurations.
PLC Reverse Engineering
Reverse engineering PLCs from board to control logic: identifying components, probing test points and debug interfaces, mapping communication buses, and analyzing proprietary logic blocks and bytecode to reconstruct program flow, I/O mappings and interlocks.
Reporting and Publishing
We publish detailed reports of independent discoveries as part of our responsible disclosure releases, enabling antivirus vendors and security providers to integrate detection checks once fixes are available. For our customers, every vulnerability we find comes with a detailed report and proof-of-concept exploit, so developer teams can quickly understand and reproduce each issue.
Private LLM Infrastructure
Automated firmware scanning is hosted on our own premises on private LLM infrastructure (GLM 5.3 Flash, DeepSeek v4.1 1017), ensuring your firmware and vulnerabilities stay undisclosed to third-party LLM providers until they are fixed and deployed.
Fault Injection
Voltage, clock, EM and laser glitching campaigns against secure bootloaders, cryptographic accelerators and trusted execution environments.
Side Channel Analysis
Power and electromagnetic trace acquisition, leakage assessment and key recovery attacks on software and hardware crypto implementations.
Secret Extraction
Pulling the keys out of the silicon: credentials, certificates and key material recovered from flash dumps, eMMC/NAND reads, OTP fuses and secure elements.
Research & Tooling
Open publication of methods, reproducible setups and purpose built tooling, all shared through our research log.
Contact
Want to work with us?
Whether it's a pre silicon evaluation, a product security assessment or a joint research project: get in touch. We respond with a scoped proposal, not a sales deck.
Drop me an email
- Contact
- Konstantin Mishev
konstantin@picofault.com - OpenPGP
BBB6 2221 AD8E 3F97 84AD A0C4 13AD 0386 0500 2069
Coordinated disclosure policy
This policy explains how Picofault Lab reports vulnerabilities to vendors and open-source projects, coordinates fixes, and publishes security advisories.
View the disclosure policy- Receipt confirmation
- Within 7 calendar days
- Findings confirmation
- Within 30 calendar days
- Publication deadline
- 90 calendar days after the initial report