We audit signaling, 5G core, RAN and SIM with our own methodology. No ties to vendors or operators: objective reports and a remediation plan prioritized by risk.
ISO 27001Certified information securityGo straight to what matters to you.
SS7, Diameter, 5G core, RAN, IMS and OSS, end to end.
Provisioning, interconnection and fraud prevention.
Industry, healthcare and defense: NFV/CaaS, slicing and edge.
OTA, key management and profile lifecycle.
Industrial Wi‑Fi, TETRA, GSM‑R and mission-critical communications.
Tell us your challenge and we'll define the scope with you.
We protect our clients' identity under non-disclosure agreements.
Weak encryption and poor authentication on the Wi‑Fi network of an automated warehouse.
Read the case →Blind spots in real-time threat detection across the support systems.
Read the case →Vulnerabilities in the 5G core implementation detected at an early stage of deployment.
Read the case →We simulate real attacks on SS7/Diameter, 5G core, RAN, orchestration and APIs. At the end you get findings prioritized by risk, a remediation plan and a session to review it with your technical team.
What we audit→We define with you which technologies and assets are in scope.
On SS7/Diameter, 5G core, RAN, orchestration and APIs, remote or on-site.
Every vulnerability, ranked by the risk it poses to your network.
A remediation plan and a session to review it with your technical team.
No ties to vendors or operators. We don't sell products, so the report doesn't depend on any catalog.
Telecommunications only, in depth: SS7, Diameter, 5G core, RAN, IMS, OSS, SIM/OTA.
Over 40 years of combined experience auditing major operators in Spain, Italy, Poland, the United Kingdom, Norway and Sweden.
What we research becomes methodology. We present it at Black Hat, DEF CON and RootedCON.
Each model meets a different need. Here's what each one brings.
| Independent auditorlike Ethon Shield | Vendor | Generalist cybersecurity consultancy | |
|---|---|---|---|
| Focus | Telecom network security | Its own technology and solutions | IT and business security across sectors |
| Relationship with your network's suppliers | None: it sells no products or remediation | It is one of them | Depends on its partnerships |
| Typical technical scope | Signaling, 5G core, RAN, SIM/OTA, OSS | The elements it supplies | IT infrastructure, cloud and processes |
| Best fit when… | You need an assessment of the whole network with no ties to any supplier | You want to validate or harden its specific technology | You want a broad view of corporate security |
Technical papers and articles by our team, presented at international security conferences.
AI-generated imageHow weak authentication policies in 2G‑5G networks are exploited to commit fraud.
Read article →
AI-generated imageWhat we have observed attacking 5G SA cores in the deployments we analyzed.
Read article →
AI-generated imageCorrelating the IMSI with the encrypted SUCI identity, demonstrated on commercial 5G SA networks in Europe.
Read article →
AI-generated image
Tell us which technologies you use and what concerns you. We'll propose a tailored scope.
