IOActive

IOActive is a cybersecurity research and consulting firm that grew out of a competitive ethical-hacking group before formalizing into a professional security testing practice. It provides aviation-sector penetration testing, vulnerability research, and cybersecurity advisory services, helping airlines, airports, and OEMs identify and remediate risks across IT, OT, and connected aircraft systems.

IOActive is a cybersecurity research and services firm founded in 1998, with research labs in Seattle and Madrid and a team spread across more than 30 countries. It serves Global 1000 organisations across ten sectors and runs a dedicated transportation and aviation practice. Aviation work covers penetration testing of cabin management systems and their mobile applications, cybersecurity assessments of aircraft systems, airport cyber physical assessments including baggage handling and refuelling systems, risk assessments, security architecture reviews and supply chain integrity services. Its published research includes vulnerabilities in in flight entertainment systems and in the backend codebases and core vehicle networks of the Boeing 787. Engagements are consulting based and scoped per project rather than sold at a published price.