Cyber security & applied research

We break systems.
Then we build what defends them.

K3Y has two halves: an offensive security team that finds what your tooling misses, and an EU-funded research lab building the detection systems that come next.

Request an engagement Explore the research

Services

Offensive security, delivered as evidence.

Every engagement ends with a report you can act on: what we found, how we found it, and what it would cost you if we had not.

Penetration Testing

Find the risks that automated tooling structurally cannot find.

Read more

Purple Teaming

Red and blue working the same problem, at the same time.

Read more

Research & development

The half of the company with no client yet.

We design, develop and implement customised solutions, products and frameworks — funded through European research programmes and tested against problems that do not have a vendor answer yet.

Browse the projects

  • 31 Funded research projects
  • 6 EU funding programmes
  • 5 Research domains

Products

Built in the lab, hardened in the field.

Three platforms that came out of our research work and now run in production environments.

Federated SIEM

K3CyberRadar

A federated SIEM combining AI-powered detectors with signature-based detection, focused on industrial and 5G protocols.

  • Real-time threat detection and mitigation
  • Federated Learning for distributed detection
  • SDN-based attack mitigation
Deception

K3DecoyNet

Orchestrated honeypot infrastructure that makes an intruder reveal intent before reaching anything real.

  • Reinforcement Learning-based orchestration
  • Honeypot Manager dashboard
  • Log storage, normalisation and visualisation
SDN orchestration

K3NetOrchestra

Convert traditional IT networks into fault-tolerant, software-defined networks.

  • Fault-tolerant SDN infrastructure
  • Multiple coordinated controllers
  • Northbound API

Solutions

Where the research is pointed.

Five domains where we build and test: AI-driven detection, next-generation networks, industrial control, and the digital twins used to attack them safely.

Cyber-AI

Real-time intrusion and anomaly detection, threat intelligence and smart honeypots.

  • Machine Learning (ML)
  • Deep Learning (DL)
  • Reinforcement Learning (RL)
  • Generative methods

5G and Beyond 5G

Virtual and physical testbeds supporting both RAN and Core services.

  • Virtual testbeds
  • Physical testbeds
  • RAN services
  • Core services

Digital Twins

A virtual replica of your physical assets, safe to attack.

  • Generative Adversarial Networks (GANs)
  • Generative Pre-trained Transformers
  • Real-time monitoring
  • Analytics

ICS/SCADA Security

Intrusion detection and prevention built for industrial protocols.

  • Intrusion detection
  • Intrusion prevention
  • Protocol inspection

SDN Management

Turn IoT environments into software-defined networks.

  • Decentralised SDN controller
  • Fault-tolerant architecture
  • Asset discovery
  • Network monitoring dashboard

Team

The people who sign the report.

Engineers and researchers with doctorates, OffSec certifications, and a habit of publishing what they find.

Find out what an attacker already knows.

A scoped engagement, a fixed window, and a report that names every finding.

Talk to the team