Stay safe with Subreption

For over a decade we have been providing best-in-class information assurance services and research, pioneering defensive and offensive security concepts and solving some of the most challenging security challenges for our customers in defense, finance, IT and legal services industries.

Request demo
Image Description
SVG

Focus on research

Unlike consulting clearing houses depending on external innovation, Subreption has its origins in a strong, best-in-class research and development team with a long track record of industry successes.

  • 15+

    average years of experience per team member and contractor

  • +3 billion

    Linux devices and systems using technology we pioneered and contributed to

Press releases

Stay informed about our latest announcements and developments.

Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches

Subreption publicly releases FLAPPYSWITCH research, exposing critical vulnerabilities in CommScope/Ruckus FastIron-based ICX enterprise switches, highlighting severe risks affecting government-certified FIPS/Common Criteria products deployed globally.

View details »

SecuredDrop available

Subreption has made available a SecureDrop installation for sources to anonymously submit materials. Already established in 2022, the installation offers unparalleled ease of use and safety to those who might be considering submitting materials to us, related to any of our areas of expertise, open source projects and other cooperative efforts, as well as the business operations of Subreption and its customers.

View details »

2022 DJI Alleged Drone ID Vulnerabilities

May 2022. Subreption publishes its stance on the recent 'hype' surrounding vaguely technical issues related to DJI's so-called Drone-ID broadcasts, and the misrepresentation of these alleged security vulnerabilities as a publicity stunt, while also ignoring prior work by well-respected industry peers. A complete rebuttal of these claims and their motivations is provided.

View details »

Trusted by customers in defense, finance, IT and legal services industries

Logo
Logo
Logo
Logo

Labs

Selected articles and posts published in our blog.

ChatGPT Capabilities: Cryptography Challenges (Part I)

ChatGPT Capabilities: Cryptography Challenges (Part I)

We haven’t published anything related to ChatGPT until now, mostly due to the fact that our use of GPT has been constrained to offloading menial tasks that are repetitive or just needlessly tedious yet simple enough. The state of the art as far as GPT is involved has changed swiftly over the course of 2023 and 2024, at times providing very unreliable results.

The model has some clear biases and the pitfalls are well known, the most relevant of them being the fact that “it does not know what it does not know”, which, applied to topics like programming related prompts, means it often produces strange concoctions: code where outdated APIs might be used mixed with newer ones, insecure code constructs (far more than people seem to notice or assume), poorly organized code (for example, GPT-4 produced less than stellar Python source code in response to relatively simple prompts), etc.

16 minutes
Hardware and firmware reverse engineering primer: dissecting an FPV and video surveillance platform

Hardware and firmware reverse engineering primer: dissecting an FPV and video surveillance platform

In this article we will describe the general methodology and some specifics of both the hardware and software reverse engineering efforts to transform an OEM video sensor platform into a functional lab testbed, determining how the operating system works, figuring out bypass methods for any protections encountered, determining how radio interfaces can be enabled and accessed, and how GPIOs and other hardware interfaces are handled by the original firmware.

43 minutes

Our values

Founded originally with the intention of protecting intellectual property derived from research, Subreption has never made marketing or profit the main forces behind its efforts. Instead, our resources have been primarily dedicated to consistently producing innovative research in the fields of information assurance and secure communications. Social media or press and media attention are the least of our concerns. This attitude over the years allowed us to focus on pragmatic, immediately useful solutions for our customers with no nonsense. We firmly believe that our job is to provide our customers with honest, respectful but straightforward insight into their shortcomings and weaknesses.

Image Description

Experience

We have successfully competed for, won and engaged in multiple months-long contracts for defense, banking and IT customers since the beginning of the firm. Our accumulative experience in information assurance spans decades worth of successful research and development, consulting engagements and open source contributions.

Incident Response services
Image Description Integrity

Integrity

Our staff and the firm have always strived to avoid any and all potential conflicts of interest across all our projects and engagements. While other firms might engage in potentially questionable and conflicting directions (defense versus offense), we have a solid track record of rejecting customers for consulting engagements that develop products against which we have developed offensive capabilities. If your firm engages with Subreption, we will enter an agreement to effectively enforce a full disclosure stance for any security issues discovered in the future outside of the engagement.

Consulting
Image Description

Excellence

We take pride in our work, but at the same time avoid over-hyping and making claims we cannot sustain with hard facts. Our constant effort to keep up with the status quo in the industry reflects on our attitude of "no empty promises". We understand security is a process, and as such, it is virtually impossible to provide absolute assurances. However, it's our work ethic to work with customers towards the maximum achievable level of assurance within their budget and circumstances.

Research & Development