NEWFree EU CRA product check · Nov 30Apply →
Security by industryPhysical AI product security roadmap

Robotics & autonomous systems
security roadmap

Anything that moves is dangerous in the wrong hands

Successful Pwn2Own exploits two years running · 6 robot vacuum models hacked

We actually attack robots and autonomous systems to see whether control commands can be altered from outside to make the machine move.

For · Robotics & mobility manufacturers
Checking whether forged commands move the robot arm
TRACK RECORD

Robot hacking, done by a team that has actually done it

There are no established security regulations for robots yet. So there's only one benchmark: real experience breaking into them.

×6# root
6 robot vacuums
CASE 01Robot vacuums

6 robot vacuum models hacked

Commissioned by
Korea Internet & Security Agency (KISA)
Project on vulnerability management measures for consumer IoT products
Period
Mar – Jul 2025
6 models hacked
CASE 02Autonomous appliances

Wellness robot earns security certification

Scope
Set up a continuous assessment project
Period
Dec 2024 – Aug 2025
Achieved KISA IoT certification at the Basic level
Deep Robotics Lite3
CASE 03Quadruped robot

Robot dog hacked

Target
Deep Robotics Lite3
Type
Independent security research
(device purchased and analyzed by ZIEN)
Period
Sep – Oct 2026
11 vulnerabilities reported to an international CNA (VulnCheck)
THREAT SCENARIO

When a robot is hacked, this is what happens

It's not data on a screen that changes — it's real-world movement. ZIEN reproduces these scenarios hands-on to verify they can be stopped.

SCENARIO 01Robot vacuum

Secretly looking inside your home

Going through app and cloud accounts, attackers pull out camera footage and a map of the home's layout. Even the living room layout and daily routines are laid bare.

App account takeoverCloud accessVideo & map leak
ResultPrivacy breach
SCENARIO 02Industrial robot arm

Motion inside the safety fence changes

Attackers get in through the maintenance port and lift the speed and range-of-motion limits. Even when the arm moves along an unusual path, no one notices.

Maintenance port accessControl settings changedSafety limits removed
ResultWorker injury · line stoppage
Attacker's controller
SCENARIO 03Robot dog (quadruped)

A second controller appears

Attackers intercept the wireless control signal and send commands that look legitimate. The operator's controller is unchanged — yet the robot dog follows someone else.

Wireless signal analysisCommand forgeryRemote takeover
ResultRemote control · on-site accidents
Test scope
Every robot layer
  • Control comms · commands
  • Sensors · perception
  • Firmware · debug ports
  • Monitoring · update servers
WHAT WE SOLVE

We find it, fix it, and protect it after launch

Testing

Z-PEN

Offensive security experts break into your deviceWe attack the actual device and firmware ourselves, and deliver the vulnerabilities we find with reproduction steps.
  • Control command forgery & hijacking tests
  • Sensor input manipulation tests
  • Security test report (penetration testing & fuzzing)
Secure SDLC

Z-Series

Automated protection from the development stageAutomated firmware analysis, SBOM management and vulnerability remediation alongside your developers — all in one flow.
  • Automated firmware analysis & continuous assessment (Z-IoT)
  • SBOM generation & management (Z-BOM)
  • Vulnerability remediation & management with your developers (Z-ONE)
  • Support for running your SPDF
Post-market

PSIRT

With you to the end, even after launchWe take in vulnerabilities reported after launch and run disclosure, patching and retesting for you.
  • Vulnerability handling process
  • CVD policy operations
  • Security update & retest response
FAQ

Frequently asked questions

QWhich robots are covered?View details ▾

Industrial and service robots, as well as autonomous systems.

01Industrial robots02Service robots03Autonomous systems
QDo we need testing even without regulations?View details ▾

When a robot is hacked, it physically moves. Even without set regulations, checking it from an attacker's perspective before launch reduces the risk of accidents and recalls.

01Remote control02Malfunction03Data leaks
QHas ZIEN actually hacked robots before?View details ▾

Yes. We have a track record of breaking into real products, including security testing of 6 robot vacuum models, hacking a robot dog (Deep Robotics Lite3), and successful Pwn2Own exploits two years in a row. You can see the cases in TRACK RECORD above.

016 robot vacuums02Robot dog03Pwn2Own
QHow far does the testing go?View details ▾

We look at every path an attacker could take — the app and cloud that control the robot, the robot's firmware and hardware debug ports, and wireless communications such as Wi-Fi and BLE.

01App · cloud02Firmware · hardware03Wireless
QWhat do we receive?View details ▾

Reproduction steps and safety impact for each attack scenario, a remediation guide and retest results.

01Reproduction steps02Safety impact03Retest results
QCan you test products still in development?View details ▾

Yes. Testing at the prototype stage makes design changes easier and less costly. When the firmware is updated after launch, we retest the parts that changed.

01Prototype testing02Design feedback03Retesting after updates
QWon't the robot break during testing?View details ▾

We agree on the test scope and safety conditions in advance, and do hands-on work such as hardware analysis on samples we've agreed on with you.

01Scope agreement02Safety conditions03Agreed samples
QAre there regulations to follow when launching overseas?View details ▾

There are no security regulations specific to robots yet, but EU RED 3.3 may apply if the product has wireless functions, the EU CRA if it contains software, and the EU Machinery Regulation if it's industrial machinery.

01EU RED 3.302EU CRA03EU Machinery Regulation
QWill the test results be made public?View details ▾

Results are delivered only to you under a non-disclosure agreement and are never disclosed without your consent.

01Non-disclosure agreement02Delivered to you only03Disclosed only with consent
CONTACT

Tell us about your devices and models

Just tell us what to test — we'll reply within 5 business days with a proposed scope and timeline.

support@zi-en.io · +82-70-4571-9854