IoT Testing That Covers Every Layer of Your Connected Product

Both. Our IoT testing covers the full stack: device firmware and embedded software, communication protocol behaviour at the packet level, companion mobile apps (iOS and Android), cloud API integration, and end-to-end user journeys. For hardware-in-the-loop testing, we work with client-supplied device samples across your target SKU range.

Yes. We test Matter over Thread, Matter over Wi-Fi, and Thread Border Router interoperability. As Matter adoption has accelerated, we have built test rigs covering the major ecosystems — Apple Home, Google Home, Amazon Alexa, and Samsung SmartThings — to validate that devices behave correctly across controller implementations, not just against the spec.

The UK Product Security and Telecommunications Infrastructure (PSTI) Act requires connectable products to meet baseline security requirements: no default passwords, a published vulnerability disclosure policy, and a declared minimum security support period. We audit devices against all three requirements, test the vulnerability disclosure process, and produce documentation suitable for your compliance records.

We validate the full OTA lifecycle: update delivery, installation success and failure recovery, rollback behaviour, partial update handling, and post-update functional regression. We also test update resilience under adverse conditions — interrupted connectivity, low battery, concurrent usage — which are the scenarios most likely to cause field failures.

Our IoT security testing goes well beyond PSTI credential requirements. We probe local LAN APIs for unauthenticated endpoints — a common weakness in Zigbee and Wi-Fi devices that expose HTTP or MQTT interfaces on the local network without authentication. We validate TLS implementation between device and cloud, checking certificate pinning, cipher suite strength, and whether traffic can be intercepted via man-in-the-middle. We scan embedded Linux and RTOS components against known CVEs. And we test authentication bypass scenarios on companion app APIs. The result is a security report structured against ETSI EN 303 645 provisions, suitable for your compliance documentation.

Yes. UK mains supply is nominally 230V but can range from 207V to 253V under BS EN 50160. We test device behaviour across this range using a programmable AC power source, including deliberate brownout simulation (voltage drop to 85% of rated supply) and fast transient events. For battery-powered devices — door sensors, motion detectors, temperature sensors — we profile current draw across operating modes and test functional behaviour at low battery thresholds (typically 10–15% charge). Devices that fail gracefully under power stress rather than crashing or entering undefined states are a key quality indicator, particularly for products like smart plugs and lighting controllers where unexpected behaviour at low voltage can create safety concerns.

We build multi-device test rigs scaled to represent realistic deployment scenarios — typically 20, 50, and 100 concurrent devices depending on the product category. We measure command-to-action latency from the moment a user triggers an action in the app to the moment the device responds, across the full stack: app → cloud API → device. We establish P50, P95, and P99 latency baselines under normal load and stress conditions, and test for hub CPU and memory exhaustion as concurrent device count increases. For mesh networks, we measure throughput degradation as nodes are added and removed, and validate that latency remains within acceptable bounds at the edge of supported device counts.