Last updated: April 29, 2026
IoT/OT runs on protocols designed for constrained devices, often without security as primary concern.
The big four
- MQTT — pub/sub for IoT. Default no auth; if auth, often password in plaintext. TLS optional.
- CoAP — HTTP-like for constrained devices. UDP-based; DTLS optional.
- Modbus — industrial. No auth. No encryption. Designed 1979.
- BACnet — building automation. Limited auth.
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.