Product security consulting, code audits, emulation and fuzzing setups for teams developing embedded systems and connected products.
Full attack surface coverage: hardware, firmware, communication protocols, web interfaces, cryptography.
Real-world attack simulation: identification and exploitation of vulnerabilities across the full attack surface — embedded, firmware, protocols, web, mobile.
Two engagement modes: black-box (no source access, realistic attacker perspective) or white-box (with source access, exhaustive analysis).
Threat modeling customised to your product. Expert + AI applied to vulnerability detection. Detailed report with CVSS-based priority scoring.
Emulate your firmware off physical hardware to fuzz at scale — no lab rig, no bring-up bottleneck. Full control over hardware and software behaviour, throughout development, for incremental remediation without impact on delivery.
Learn all about memory corruption attacks, their exploitation and counter-measures. Adapted to the audience's level, from development teams to non-technical staff. Already delivered at EPITA (Master's level) and MediaTek.
Security can be integrated at every stage of a product's development, from initial design to production release.
Attack surface definition, cryptographic primitive selection, architecture review. Early involvement reduces the cost of remediation significantly.
Automated vulnerability detection and out-of-device testing for an integrated product security process. Easy bring-up, and no security regression.
Audit or pentest of the product in production-equivalent conditions. Report with CVSS-based priority scoring, vulnerability classification and remediation recommendations. Team debrief.
Training on common vulnerability patterns: memory corruption, injections, incorrect use of cryptography. Reduces the attack surface structurally over the long term.
Security expert specialising in embedded systems and IoT vulnerability research: manual and AI-assisted code review, emulation & fuzzing, across targets ranging from secure boot to TrustZone, firmwares and Android applications. Following engagements at the French Ministry of Defense and Thales Security Lab, I have been working independently as b0rg since 2024.
MSc in Computer Security & Cryptology, Université de Bordeaux.
Fluent in English and French. Comfortable in front of an audience, from technical debriefs with engineering teams to presentations for management and classroom training.
b0rg is a sole trader based in Toulouse, France.
For any inquiry, use the address below.
b0rg is spelled with a zero, not an 'o'