DigiCert Trust Solutions Partner
MENU
GET IN TOUCH

OUR SERVICES

Secure Platform Engineering Services

We help engineering teams design, build, certify and deploy secure embedded systems. Whether you’re starting a new product development or upgrading the security on 1000s of fielded systems, we provide systems design and system implementation services backed by real-world deployment experience.

Platform Security

Secure Boot Implementation

  • Multi-stage boot with OS independent cryptographic signature verification for both custom boot ROM and UEFI based targets
  • Host tools to sign images with OEM private keys
  • Support for multi-bank images, tamper recovery, and Zero Touch boot image and key refresh

OS Hardening & Secure ROM Builds

  • Custom Android AOSP modifications with SELinux and Kiosk mode
  • Always-on VPN integration, encrypted storage, and MDM compatibility
  • Hardened Linux trust store, secure keystore, and NIST compliant cipher suites for upper layer services

Cryptographic Engines

  • High-performance crypto library development, optimization and porting to bare metal and RTOS platforms
  • Hardware acceleration: Custom chips and AES-NI
  • Crypto engine plugins for OpenSSL (EVP) and shims for mixed language environments

Secure Deployment Solutions

Zero Touch Update Frameworks

  • OS agnostic signed and encrypted update packages based on the CMS/PKCS#7 standard
  • OTA updates delivered via : HTTPS, TLS, SFTP or offline media for air-gapped devices
  • OTA Updates can be firmware, bootloaders, OS images, applications, or configuration data

Zero Touch Device Identity & Certificate Provisioning

  • EST & SCEP protocol implementation for Zero Touch certificate issuance
  • Device identity tied to hardware root of trust (e.g. TPM), or derived from device specific identifiers
  • Full lifecycle: device provisioning, onboarding and X509 certification renewal

Legacy System Hardening

  • System engineering for security upgrades to brownfield devices
  • Automated update framework to safely install firmware, BIOS and O/S updates
  • OTA patching of high risk vulnerabilities

Security Assessment & Compliance

FIPS 140-3 Certification & Compliance

  • FIPS Architecture guidance and cryptographic module source code review
  • Full FIPS project lifecycle: gap analysis, SW development, security policy creation, validation testing, lab coordination
  • FIPS required cryptographic module changes, CMVP/ACVP automated test development

Platform and Application Security Analysis

  • Existing OS and Application security review, source code review and SAST/DAST scanning
  • Mapping of security compliance frameworks (e.g. ISO-27001, NIST) requirements into embedded systems requirements
  • Reverse engineering of firmware, applications, third-party libraries, and protocols

Need a Secure Foundation?

We work directly with your technical team to integrate security where it matters — at the platform level.

GET IN TOUCH
  • Reliable Support
  • Strong Security
  • Technical Expertise
  • Scalable Solutions
  • Clear Communication

All Rights Reserved © Black Cypress, Inc | Privacy Policy | Terms of Service | Cookie Policy

Powered by: webdev.com