Z-PEN
- Threat model
- Security risk assessment
- Security test report (penetration testing & fuzzing)
When the line stops, the losses start immediately
We test whether factory equipment and industrial machinery can be manipulated or stopped from outside, and support you all the way through meeting security requirements.
This is the industrial equipment security architecture ZIEN proposes. Protecting every layer of the device takes specific tasks at each stage.
In January 2026, we signed a product cybersecurity cooperation MOU with Bureau Veritas.
Read the MOU news (Korean) →
We prepare you based on the EU Machinery Regulation ((EU) 2023/1230, applicable from January 2027) and the EU CRA, in line with IEC 62443, the industrial control system security standard.
If software or a network connection plays a part in the machine's safety functions, it needs to be reviewed. We work with you to determine applicability for each product, based on the Annex III requirements for protection against corruption (1.1.9) and safety and reliability of control systems (1.2.1).
The EU Machinery Regulation applies from January 20, 2027. Design changes and technical documentation take time, so it's best to work backward from your launch schedule and start planning now.
We test after agreeing on downtime windows and the test environment, so production isn't affected.
We prepare supporting evidence and answers for security-related questions raised after submission.
Yes. We test the control equipment's firmware, communication paths, and HMI and remote access points in the order a real attacker would, to see whether any path reaches the PLC.
The EU CRA requires a list of the software components in your product (SBOM). With Z-BOM, you can extract components from firmware and produce the list in the standard SPDX or CycloneDX formats.
Yes. The CRA requires vulnerability handling and security updates throughout the support period, and from September 2026, actively exploited vulnerabilities must be reported. When a new CVE appears, we find the affected products and carry it through to remediation.
A test report with reproduction steps, together with security evidence to include in your technical documentation.
Just tell us what to test — we'll reply within 5 business days with a proposed scope and timeline.
support@zi-en.io · +82-70-4571-9854