CRATE™

Collaborative Remote Automated Test Environment

Cybersecurity Testing Platform for Automotive and Medical Devices

Revolutionizing cybersecurity testing of automotive ECUs, medical, and IoT devices.

CRATE allows product security professionals to remotely test devices anywhere in the world.

Product test personnel no longer need to be co-located with the hardware under test.

CRATE’s remote access is complemented by automation features, resulting in lower test costs and short test times.

Save Time, Costs, and Improve Security

Supports all types of security testing: validation, vulnerability, penetration testing
Securely connect ECU or medical devices to testing experts located anywhere
Shift Left! Find vulnerabilities sooner! Automation for security testing as part of CI/CD.
Supports interfaces to both wired and wireless interfaces including Ethernet, USB, WiFi, Bluetooth, CAN, JTAG
Designed to support cybersecurity certifications and compliance with regulations.

Securely Connect Penetration Testers to the Device Under Test Regardless of Location.

Limited availability of penetration testers is a challenge that CRATE was designed to address.

Penetration Testing Services

BG Networks and our network of trusted partners offer world-class pentesting services using CRATE.

CRATE enables the lowest cost and shortest time-to-completion testing services possible.

Benefits of CRATE-Based Pentesting Services

Full vehicle, HIL, or large medical device testing without testers coming on site
Lower costs by leveraging pentesters located around the world
Shorter pentests by making hardware-under-test accessible instantly and at all times
Immediate demonstration of vulnerabilities with CRATE spectator mode

A First: Remote Bug Bounties

CRATE is the first platform to enable remote bug bounties for automotive, medical, and IoT devices. The ability to remotely access devices under test supports the many benefits of the crowdsourced testing approach that bug bounties offer.

No longer do bug bounty researchers need to travel to be co-located with the devices under test.

Benefits of Remote Bug Bounties:

Enables 100s of security researchers to test your device
Fast time-to-test for new releases of software
Leverage the diversity of approaches that a large group of testers offer for finding vulnerabilities a small team might miss
Complementary approach to penetration testing

Fuzz Testing Automation

Automated fuzzing tools available for standard network interfaces
Short time to testing: Begin testing right after setup
Enables security testing much earlier in CI/CD development
Testing can begin before cryptographic features (signing, encryption, etc..) are implemented

Standards, Laws, Regulations

CRATE was developed to address the increased cybersecurity testing that new standards and regulations are demanding, including:

R.155
ISO/SAE 21434
FDA Refuse to Accept
MDR
EU Cyber Resilience Act

CRATE helps solve the challenge of increased security testing without significantly increasing testing personnel or budgets.