Software Security Assessment
Custom expertise projects built around your need: pentesting, reverse engineering or research on a technique, on mobile apps, firmware and Windows or Linux software.
Get an assessment whenever you need to be sure
A new product, a major update or a new platform, before attackers see it.
The EU Cyber Resilience Act, EN 18031 for radio devices, DORA for financial services.
A security questionnaire or an audit that needs independent evidence.
You need to know if it affects your version, and how far it goes.
Obfuscation, anti-tampering, anti-debugging: do they hold against a real attacker?
A new attack, a tool or a method your team wants studied in depth.
Custom projects built around your need
We attack your application, device or system the way a motivated attacker would, and show what they could reach.
We take apart binaries, protocols, protections and firmware to explain what they really do.
We study an attack, a vulnerability class or a method in depth, and turn it into results your team can reuse.
A plan agreed with you, reviewed with you
We define the project with you.
We work on it, with you in the loop.
Results your team can check and reuse.
Assessed by the team that builds the tools
For more than 10 years, eShard engineers have taken apart apps, firmware and operating systems for the industry's most demanding security teams. The same people run your assessment.
Our analysts develop Epoch and esReverse, which carry on more than a decade of REVEN time travel analysis. When a target is hard to analyze, we extend the tool.
From an Android kernel use-after-free taken to root, to router firmware and Windows exploits: our analyses are on our blog, so you can judge our work first.
Security teams learn reverse engineering in our esCoaching courses, taught by the people who run your assessment.
Have software to assess?
Tell us about your need. An expert will get back to you for the technical scoping.
Frequently Asked Questions
It depends on the scope. The commercial proposal sets out the plan and the dates, and we review them with you at each periodic meeting.
On the technical scope and the resources it needs: the experts involved and any lab access.
A PDF report with our findings, the notebooks to run the analysis again, and an esReverse SaaS workspace with the recorded executions.
We are not a certification lab. Our results give you independent evidence to prepare an audit or a certification, and to answer your customers.
