a loose group of engineers and tinkerers
we break it first. then we put it together. just differently.
about
build
ObscureSignal is a loose group of engineers and tinkerers who build open hardware and software for people who want to know what's under the hood.
Most hardware is designed for the average buyer. We build for you, the power user who wants to take it further.
break
We test devices the way an attacker would: board, debug ports, buses, radio and boot chain, including fault injection by voltage glitching and EMFI.
On the defensive side we review and advise: threat analysis and risk assessment, and guiding engineers through the Cyber Resilience Act (CRA), RED / EN 18031, IEC 62443 and the Machinery Regulation, and how to implement them.
We build slowly and in the open. Nothing ships until we have tried to break it ourselves.
values
build
Your hardware runs on your network. No cloud, no call-home. If it needs the internet to function, it's broken.
Open, documented and meant to be extended. Built to be opened, diagnosed and fixed, schematics included. Throwing away good hardware isn't a design philosophy, it's a failure.
You bought it, it's yours. If we ever offer a service, it sits on top, and the hardware keeps working without it. No locked features, no ransom.
break
We start at the board, not the documentation. Debug ports, buses, radio and boot chain first, then the paperwork.
Every finding comes with how we found it and how to reproduce it. Our report recommendations are directly actionable.
Client names and findings stay out of everything we publish. What we test for you stays with you.
manifesto
You don't want products that do the thinking for you. You want tools that extend your own capability, something that responds to intent, not assumptions. Most devices are built for a world where the user is a liability to be managed and security is a checkbox. We assume the opposite on both counts. You're smarter than the device. And every device can be broken. So we build ours to be opened, and we open yours before someone else does.
contact
Whether it's a partnership, a bug report, or just a question, reach out!
We read everything and you'll hear back from someone close to the fire.