Consulting & development services

Securing an embedded device is a challenge: constrained hardware and software, limited in-house cybersecurity expertise, and a fast-changing regulatory landscape all raise the risk of shipping a vulnerable product.

TrustnGo provides a wide range of services, including consulting, development and training, to support you from drawing up product specifications according to applicable regulations through to the security monitoring of your products over time.

Get a Price Quote Get Flyer

Advanced cybersecurity certification support

TrustnGo can help you to pass Common Criteria, CSPN (ANSSI), BSZ (BSI), SESIP, PSA Certified or PCI certifications. We can write your security target or vendor documentation. We can also help you to harden your product both on software & hardware aspects.

Integration of security features

We can help you to implement security features in your MCU or MPU based device. Our security architecture methodology is based on ARM's Platform Security Model, whose logic can be applied to other kinds of architectures (e.g. Espressif, RISC-V, etc.).

Here are some examples of security features that can be implemented:

Secure boot & secure update
Secure storage using TrustZone, Secure Enclaves or external secure elements
Secure communications
Anti-tamper detection
etc.

Secure Development Life-Cycle

TrustnGo provides consulting services related to Secure Development Life-Cycle.

We can help you to:

Perform manual or SAST-assisted code review
Harden your source code
Review your development process
Secure your supply chain including open source software
Monitor the vulnerabilities affecting your devices

Cryptography & provisioning of secrets

TrustnGo has a strong expertise in cryptography and secure communication protocols:

PKI management
Cryptographic protocols analysis
Secure provisioning (custom or based on chip vendors' mechanisms)

We integrate into your ecosystem and development process

Depending on the user's requirements, we can either bill on a flat-rate basis or on a time-per-use basis.

We can also occasionally move to the customer's office to improve the quality of exchanges during a workshop, for example.