ASECASECCanadian offensive security. Cloud, applications, APIs, identity, AI, and the embedded and autonomous systems most firms will not touch — same operators, one engagement, one report your engineers can reproduce on Monday.
Six ground-control and middleware projects, fifteen findings, one broken trust boundary. A compromised drone does not have to stay on the vehicle — it can reach up the command chain and own the operator.
The training range we build and maintain in the open — a simulated airframe, ground station, and radio link, free for anyone learning to attack autonomous systems.
The Toronto DEFCON group our founder started in 2016 is now 2,880 people. Where hackers meet hackers, still, ten years on.
A field study of telemetry links across eleven commercial aircraft, and what it takes to fly one from the ground.
A defence UAS prime handed us a production flight controller and asked how far we could get. Far enough that the fix shipped before the next flight test.
Four vendors shipped secure boot with signature checks that never ran. We show the extraction, the patch, and the fix.
Who we are //
Software, hardware, and radio under one roof and on Canadian soil, serving North America since 2015. When the thing being tested is critical infrastructure or a defence platform, where the testing happens is part of the requirement.
Founded by Nick Aleks — Chief Hacking Officer, co-author of Black Hat GraphQL (2023) and Black Hat Bash (2024), and founder of DC416, the Toronto DEFCON group that turns ten in 2026 and runs 2,880 members deep. Operators run the engagements, not account managers. We disclose responsibly and publish what gets fixed.
The open-source end of that is Damn Vulnerable Drone — a full simulated aircraft, ground station, and radio link built so people can learn to attack UAS without touching anything real. It is the most direct answer we have to what we actually do all day.
We're hiring operators who would be doing this anyway — [email protected]
The ask //
Tell us what you're building and what you're worried about. You'll hear from an operator — not a sales team — within one business day.
18 King Street East, Suite 1400
Toronto, Ontario
M5C 1C4