Vulnerability research
Discovering security vulnerabilities across industrial control systems, IoT devices, network infrastructure, and enterprise software.
About Unit 515
OPSWAT’s offensive
security research team.
OPSWAT Unit 515 specializes in offensive security research, vulnerability discovery, exploit analysis, and penetration testing across critical infrastructure and enterprise technologies.
What we do
Offensive Security Research. Real-World Impact.
OPSWAT Unit 515 investigates security vulnerabilities and offensive techniques, validates real-world security impact, and works with vendors and engineering teams to support remediation.
Exploit development and validation
Developing and validating proof-of-concept exploits to assess vulnerability exploitability and security impact.
Red team operations
Conducting penetration testing and adversary simulations to identify security weaknesses and evaluate defensive capabilities.
Coordinated disclosure
Coordinating vulnerability disclosure with affected vendors to support validation, remediation, and responsible public disclosure.
Research areas
Research Across Key Technologies
Our research spans industrial systems, IoT devices, network infrastructure, enterprise software, and AI security.
Explore research- OT & ICS SecurityPLCs, industrial web servers and control protocols.
- IoT & Embedded SecurityCameras and connected devices, from firmware to onboarding.
- Network SecuritySwitches, firewalls and authentication infrastructure.
- Application SecurityWeb platforms, open-source libraries and their patches.
- AI SecurityAI agents, gateways and the services around them.
- Removable Media SecurityUSB devices, keystroke injection and the media that crosses air gaps.
Vulnerability Disclosure Process
From Vulnerability Discovery to Coordinated Disclosure
- 01
Discover
Identify potential vulnerabilities through security research, code analysis, and controlled testing.
- 02
Validate
The finding is reproduced and its impact assessed in a controlled environment.
- 03
Report
A technical report goes to the vendor’s security team through its official channel.
- 04
Coordinate
Unit 515 supports the vendor through validation and remediation.
- 05
Disclose
Publish technical findings following coordinated disclosure, when appropriate.
OPSWAT CIP Lab
Hands-On Security Research in Controlled Environments
At the OPSWAT Critical Infrastructure Protection (CIP) Lab, Unit 515 conducts hands-on security research on industrial controllers, network infrastructure, IoT devices, and other technologies.
Graduate Fellowship
Developing the Next Generation of Security Researchers
Through OPSWAT’s Critical Infrastructure Cybersecurity Graduate Fellowship Program, participants gain hands-on experience in vulnerability research, exploit development, and security analysis under the mentorship of Unit 515 researchers.