insecurityofthings.com

What It Is

Insecurity of Things is a research-oriented project focused on IoT device security. Its goal is to create proof-of-concept code that demonstrates real-world security risks in IoT devices. The text explicitly notes that many issues do not show up in Nessus scan results, so the author chose to write exploits to prove the risks. Its representative project is JackIt, a partial POC implementation of MouseJack.

Core Capabilities and Protection Type

Based on the text, this is not a firewall, endpoint protection product, vulnerability scanner, or managed security service. Instead, it is more of a collection of tools for validating IoT security vulnerabilities and demonstrating attack paths. JackIt is based on the MouseJack issue discovered by the Bastille team and involves libraries related to the CrazyRadio PA dongle. Its core value is helping security teams explain risks in a reproducible way, rather than directly providing continuous protection, monitoring, or remediation capabilities.

Deployment, Management, and Integration

The text does not provide a clear deployment method, nor does it mention a web console, centralized management, alerts, reporting, or API integration. As a result, it is better suited to people with security research experience working in a lab environment, rather than being deployed directly as an enterprise-grade security operations platform. There is also no information about compliance certifications, enterprise audit capabilities, SLAs, or vendor support.

Pricing and Value for Money

The captured content does not disclose pricing, licensing model, or payment methods. If the project code is publicly available, it has strong research value. However, from an enterprise procurement perspective, its cost-effectiveness depends heavily on the team’s own capabilities, since it lacks productized delivery, support services, and compliance features.

Pros, Cons, and Who It’s For

Its strengths are that it focuses on real IoT risks, helps address gaps where general-purpose scanners may fail to find certain issues, and provides useful reference value for research into MouseJack and similar wireless peripheral risks. The downsides are its obvious dual-use nature, high barrier to entry, and lack of information on management, alerting, integration, and support. It is better suited to security researchers, penetration testers, red teams, or IoT security training scenarios, and is not suitable for ordinary enterprise users without offensive and defensive security experience.

China Access, Payments, and Alternatives

The text does not provide information on access from mainland China, payment methods, or localization support, so its availability in China is unknown. For commercial alternatives, consider Nessus, Metasploit, the Kali Linux toolset, or professional IoT security testing platforms. If compliant procurement is required, products with contracts, support, and audit capabilities should be prioritized.