Rootworks Cyber Security
Continuous firmware vulnerability monitoring and specialist assessment for IoT, industrial control systems, connected vehicles and embedded platforms. Understand your product’s resilience and keep track of new risks throughout its supported life.
North West based, near Liverpool, Manchester and Leeds Nationwide coverage
Security without guesswork
Connected products bring together applications, operating systems, cloud services and specialist hardware. Rootworks examines the whole system, turning technical findings into practical decisions for engineering and security teams. Ongoing firmware vulnerability monitoring keeps those decisions informed as new issues emerge after deployment.
How we workServices
Focused assessment and ongoing security support that give technical teams a clear view of exposure, priority and next action.
Hands-on assessment including chip-off and in-circuit firmware extraction, secure boot and debug access verification, controlled device modification and custom test harness development.
Security assessment for IoT devices, industrial control systems and embedded platforms, covering firmware, operating systems, connected interfaces and the services they depend on.
Monitor known software components across device firmware versions for newly disclosed vulnerabilities. Review relevance to your products, prioritise action and keep track of remediation throughout the agreed support period.
Engage specialist security knowledge early in design and development, before weaknesses become costly production problems.
Turn product security requirements into practical assessment of hardware, firmware, applications and update mechanisms, with evidence to support CRA, PSTI and customer assurance work.
Assessment and reverse engineering for mobile applications that control, configure or communicate with connected products.
A two-day practical course where engineering teams build, connect and troubleshoot a private GSM lab using the Osmocom stack and an ip.access nanoBTS.
Continuous firmware vulnerability monitoring
New vulnerabilities can affect firmware already in the field. Rootworks provides ongoing monitoring of known firmware components, helping you understand which products need attention and what to do next.
Identify the devices, firmware versions and known software components to monitor, using available firmware, component records or a software bill of materials (SBOM).
Track newly disclosed CVEs against the agreed component inventory, keeping visibility of potential exposure across supported releases.
Assess matches against component versions, configuration and device context so engineering teams can prioritise the issues that matter.
Provide actionable findings, remediation priorities and a record of decisions. Track fixes and agree focused verification where needed.
Agree the monitored products, firmware versions, component coverage, review cadence and reporting arrangements at the start. Keep the inventory current as firmware releases change.
Discuss ongoing firmware securityCyber resilience & product requirements
Practical guidance for manufacturers and engineering teams supplying the UK and EU markets.
Start here
Understand how secure design, testing, maintenance and recovery fit together, and which legal requirements to check.
Explore product cyber resilienceEU market
Check CRA scope, reporting duties and the 2027 product requirements before setting your engineering priorities.
Read the EU CRA guideUK consumer IoT
Review passwords, vulnerability reporting, support information and the evidence behind your connected device.
Read the UK PSTI guideEngagement approach
Every engagement is scoped around the product, its environment and the decisions your team needs to make.
Map the product, interfaces, threat model and assurance goals.
Assess the implementation using targeted offensive and analytical techniques.
Separate credible product risk from noise and theoretical exposure.
Give engineering teams clear evidence and practical remediation direction.
Technical expertise
Rootworks works across the boundaries between hardware, operating systems, applications and connected services, where product security issues are often hardest to see.
Explore hardware testingStart a conversation
Tell us what you build or operate, which firmware versions you support and whether you need an assessment or ongoing vulnerability monitoring. We will respond with a practical next step.