Know what your device actually runs.
Extracting, unpacking, emulating and reverse-engineering firmware images to understand what a device does, and what it shouldn't.
MKR Labs · Independent Hardware Security Research & InnovationResearching the
Researching the
signals others miss.
Independent hardware and firmware security. IoT and RF assessments from someone who also knows the network, the cloud and the threat landscape they live in.
Services
Making connected products secure, and compliant.
Most security testing stops at the network and the app. The weaknesses that matter sit deeper, in the firmware, the radio, the chip and the board, where a scanner or a design review can't reach. MKR Labs opens the shipped product and finds them. Regulation now demands the same. RED covers wireless products today, and the CRA reaches every connected product soon. MKR Labs takes you from gap analysis to a finished evidence file.
Regulatory
Prove you're ready for the CRA.
A technical gap analysis against the EU Cyber Resilience Act, framed by ENISA's maturity model. We find what the self-assessment can't reach, whether the product genuinely has the security the CRA requires, proven on the built device.
CRA / ENISA / SBOMCRA readinessProduct SecurityAttack it before someone else does.
Hands-on assessment of the firmware, hardware and radio in a connected product, performed on the device you actually ship. We work from the binary, not the build plan.
EN 18031 / EN 303 645Security assessmentExpertise
Five domains, one engineering mindset.
A connected product is a chain. Firmware on a chip, a radio link, a companion app, a cloud backend. MKR Labs learns how a product's ecosystem fits together and works the whole chain with one engineering mindset, hands-on in the lab. Weak links hide at every layer. An unsigned firmware image, a permissive pairing flow, an API that trusts the app. The ones that matter most sit on the trust boundaries. Each side assumes the other did the checking, and no one owns it.
Read the protocol straight off the air.
Protocol-level work on the electromagnetic spectrum, from passive capture and signal classification to vulnerability research on proprietary radios and cellular infrastructure.
What the hardware gives away.
Hardware-level research across JTAG/SWD, UART, SPI flash extraction, fault injection surfaces, secure-boot review and root-of-trust evaluation against realistic attacker models.
Follow a command from app to cloud.
Treating the companion app and cloud backend as part of the product, covering API authentication, session and key handling, and what the device trusts along the way.
From packet to protocol to policy.
Threat modelling, traffic analysis and architecture research across operator and enterprise networks.
Research
Latest from the lab.
Curious what else goes on at MKR Labs? Read the technical write-ups from original research. Methods, measurements and honest results, published in full.