IOActive

IOActive is a research-driven cybersecurity firm founded in 1998 by Joshua J. Pennell. It works with Global 1000 enterprises across every industry, applying an attacker mindset to test and strengthen their defences. The firm has remained independent since its founding, with no external ownership or acquisition.

Its services cover full-stack penetration testing across software, hardware and infrastructure, red team engagements that simulate real adversaries, security assessments of artificial intelligence and machine learning systems, and supply chain integrity assessments. A research programme underpins the work, having uncovered systemic vulnerabilities in cloud infrastructure, connected vehicles, silicon chips and industrial control systems. Advisory services are delivered in what the firm describes as a "straight-talk" style: direct and free of jargon.

Technical work spans cybersecurity research, hardware hacking, vulnerability research, cloud infrastructure security, connected vehicle security, silicon chip security, industrial control system security and digital defence. The firm operates state-of-the-art hardware hacking labs in Seattle, Madrid and the United Kingdom, and maintains a presence across six continents.

IOActive describes its culture as research-driven and mission-oriented, focused on assembling elite security professionals and on making the world a safer and more secure place. Commitment to client confidentiality is stated as a firm-wide principle.