$ ./nullptrsec --help

We'll hack you, so others can't.

nullptr security is a specialist offensive-security firm. We take on the esoteric devices and hard problems most teams won't touch, we build the tooling to do it, and we deliver results.

Start a conversation What we do

// what we do

A small cadre of engineers for problems that don't fit a checklist.

We sell depth: hardware and software expertise applied where the stakes are high, the systems are unusual, and off-the-shelf scanners and pentesters can't cut it.

01

Offensive tooling

We design and build custom offensive-security and pentesting tooling - for our own engagements and for clients who need capability that isn't ready-made.

02

Deep security assessments

White-box and source-driven assessments of real systems: firmware, embedded, protocols, and source in C/C++, C#, Java, Python, Fortran, and more. We read the code and the silicon.

03

Hard, esoteric targets

IoT and connected devices, ICS/SCADA, secure-compute and enterprise hardware. The targets where generic methodology stops and engineering begins.

// why it matters

The cost of finding out the hard way.

6B+
malware attacks recorded in 2024
$10M+
potential cost of a single breach
1
overlooked device is all it takes

The devices that are hardest to test are usually the ones an attacker wants most. That's exactly where we work.

// engagements

How we help.

Every engagement is scoped to a real decision you're trying to make. Ship, acquire, recover, build, and more. You get findings that are prioritized by impact to take immediate action, plus the context to fix the root cause, not just the symptom. We sell actionable items that result in your security, not just a checkmark for you compliance.

Discuss a scope

  1. Pre-launch validation

    Find the weaknesses in a product before your customers (and adversaries) do.

  2. M&A security assessment

    Understand what you're actually acquiring before the security debt becomes yours.

  3. Post-breach review

    Determine what happened, close the path that was used, and harden against the next one.

  4. Custom engagements

    Bespoke offensive work and tooling for problems that don't fit any of the above.

// capabilities

Where we go deep.

Our engineers work across the full stack of your product: from the board, to the firmware, to the application logic. Some of the surfaces we routinely cover:

Hardware & firmware

  • Embedded / RTOS
  • Firmware reverse engineering
  • Secure boot & TEE
  • Hardware fault injection
  • JTAG / SWD / UART
  • Side-channel analysis

Software & source

  • White-box code review
  • C / C++ memory safety
  • C# · Java · Python
  • Exploit development
  • Fuzzing harnesses
  • Cryptographic review

Systems & protocols

  • IoT / connected devices
  • ICS / SCADA
  • Secure compute
  • Wireless & RF
  • Custom & undocumented protocols
  • Network / application

Sectors we serve

  • Financial services
  • Healthcare
  • Government
  • Software vendors
  • Secure compute

// start

Have a hard problem? Let's talk about it.

Tell us about the system and the decision you're trying to make. We'll tell you honestly whether we're the right team for it.

contact@nullptrsec.io See open roles