BRP builds the hardware you ride when the road ends - or when there is no road at all. Headquartered in Valcourt, Quebec, the company designs and manufactures Can-Am on- and off-road vehicles, Ski-Doo and Lynx snowmobiles, Sea-Doo personal watercraft, and Rotax engines for karts, motorcycles, and recreational aircraft. The attack surface spans connected vehicle platforms, dealer networks, and global supply chains across manufacturing facilities in Canada, the United States, Austria, Germany, Finland, Mexico, and Australia, with products sold in over 130 countries.
For a cybersecurity team, the threat model is industrial: embedded firmware, OT environments on factory floors, IT systems supporting 12,600 employees, and the connected-vehicle stack that turns physical machines into endpoints. BRP is a publicly traded, standalone powersports company founded in 2003 - it is not a subsidiary or startup - and the scale means security work touches everything from SCADA to cloud services. The engineering culture, by its own account, values doing over debating: Progress, Ingenuity, Trust, and Drive are the stated operating principles.
If you want to secure machines that move fast in environments where a software flaw has kinetic consequences - snowmobiles at speed, watercraft in open water, aircraft engines - this is where that problem set lives.
