We are at the front line of IoT security research & proud owners of expliot.io. We understand the IoT ecosystem inside out. In the last 8+ years, Payatu has performed, security assessment of 100+ IoT product ecosystems. Our Methodology Our methodology takes into consideration the industry-wide projects looking at the most commonly vulnerable areas of the application deployments, considering the OWASP top 10 and Web Application Security Consortium. Initial Reconnaissance 1)Meeting with Developer/SME 2)Attack Surface Identification 3)Threat Modeling 4)Protocol Endpoints 5)Cloud Pentest 6)Mobile App Pentest 7)Firmware RE + Vulnerability Analysis 8)Fuzzing Protocol Endpoints 9)Hardware vulnerability analysis 10)Reporting 11)Mitigation Proposal