proofnet operates where the silicon meets the threat model: embedded security for connected products across automotive, IoT, medical technology, and industrial automation. The team works directly on the attack surface that matters - firmware, hardware interfaces, and the software supply chain. If a device ships with an MCU and a network stack, proofnet is the kind of shop that reverse-engineers its bootloader, audits its TLS implementation, and maps what happens when someone fuzzes the CAN bus or pokes at the OTA update mechanism.
The technical domains are concrete and hands-on: penetration testing, firmware analysis, security analysis, SBOM generation, and CVE monitoring form the core operational toolkit. Compliance work - ISO 27001 certification support and compliance reporting - sits alongside the offensive side, acknowledging that manufacturers need both exploitability assessments and the paperwork that regulators actually read. No product suite to sell; the deliverable is the analysis itself and the remediation guidance that follows.
As a small team of security enthusiasts and ethical hackers, proofnet runs lean - experienced specialists embedded in engagements rather than scaling through volume. The model is consultancy in the truest sense: specific domains (embedded, not cloud; OT, not enterprise IT), specific verticals (the ones where a security failure means physical consequences), and work scoped around real device teardowns rather than checkbox audits. Based in Germany.
