# Melina Security — Offensive Security for Connected Systems > Offensive security for connected systems. We assess IoT, robotics, automotive, and AI platforms before adversaries do — penetration testing, red team operations, and architecture reviews. **Based in:** Shenzhen, Guangdong, China **Bilingual:** English · 中文 **Contact:** [contact@melinasec.com](mailto:contact@melinasec.com) · [partnerships@melinasec.com](mailto:partnerships@melinasec.com) ## Security Assessment Services End-to-end offensive security across the full stack of connected systems — from silicon to cloud. 1. **IoT & Embedded Security** — Hardware teardown, firmware extraction and reverse engineering, wireless protocol analysis, device-to-cloud ecosystem assessment. — [/services/iot-embedded-security/](https://melinasecurity.com/services/iot-embedded-security/) 2. **Robotics & Autonomous Systems Security** — ROS / ROS2 security auditing, DDS middleware assessment, fleet management API testing, robotic control system penetration testing. — [/services/robotics-security/](https://melinasecurity.com/services/robotics-security/) 3. **Automotive Security** — CAN / LIN / FlexRay bus analysis, V2X communication testing, telematics testing, ISO/SAE 21434 readiness assessment. — [/services/automotive-cybersecurity/](https://melinasecurity.com/services/automotive-cybersecurity/) 4. **AI & ML System Security** — Adversarial testing of machine learning systems, prompt injection testing for LLM-integrated systems, AI pipeline architecture review. — [/services/ai-ml-security/](https://melinasecurity.com/services/ai-ml-security/) 5. **Mobile & Web Application Security** — Mobile penetration testing (iOS / Android), web & API penetration testing. — [/services/mobile-app-security/](https://melinasecurity.com/services/mobile-app-security/) 6. **Cloud & Architecture Reviews** — Threat modeling, security architecture review for connected platforms, cloud backend assessment (AWS / Azure / GCP), Kubernetes & container security, zero-trust design consulting. — [/services/architecture-cloud-review/](https://melinasecurity.com/services/architecture-cloud-review/) 7. **GRC & Compliance** — Security governance, enterprise and product risk assessments, control mapping, compliance readiness for ISO 27001, SOC 2, NIST CSF, and industry-specific frameworks. — [/services/grc/](https://melinasecurity.com/services/grc/) 8. **Social Engineering & Security Awareness** — Authorized phishing campaigns, physical and Wi-Fi pentests under written rules of engagement — part of security awareness assessment. 9. **Red Team Operations** — Full-scope adversary simulation under written authorization and signed rules of engagement: assumed breach, lateral movement, persistence, supply-chain modeling. — [/services/red-team/](https://melinasecurity.com/services/red-team/) ## How We Engage Flexible engagement models — matched to scope, complexity, and ongoing security needs. | Model | Best For | Pricing | |---|---|---| | **Fixed Package** (featured) | Mobile, Web / API pentest, cloud / architecture reviews, GRC | pricing finalized after scoping | | Scoped Assessment | IoT, automotive, robotics, AI / ML systems assessment | pricing finalized after scoping | | Custom Engagement | Social engineering, red teaming (security awareness) | pricing tailored to scope | | **Retainer** (featured) | Ongoing product-security partnerships | pricing finalized after scoping | Other custom engagements available on request. ## Our Approach — 6-stage methodology 1. **Discovery Call** — Understand your system, threat model, and goals. 2. **Scoping & Proposal** — Fixed-price, scoped, or custom model — finalized in writing within days. 3. **Threat Modeling** — Map attack surface, adversary profiles, compliance context. 4. **Testing & Exploitation** — Reverse engineering, vulnerability discovery, controlled attacks. 5. **Reporting** — Findings with severity, evidence, and fix guidance. 6. **Remediation Re-check** — One validation round within 60 days to confirm fixes hold. Full methodology: [/methodology/](https://melinasecurity.com/methodology/) ## Why Teams Choose Us > "We assess what an adversary would actually try first — not what a checklist says we should run." — Tatiana K., CEO - **International Technical Background** — Founding team brings global experience in security research, red teaming, and secure system design. - **Deep Offensive Security Expertise** — Real-world attack simulation and vulnerability research across hardware, software, and distributed systems. - **Proven Track Record** — Real findings across IoT, robotics, web services, and bug bounty programs. - **China-Ready Compliance** — Aligned with Chinese legal requirements, including collaboration with licensed local entities for regulated testing. See: [/knowledge/china-compliance/](https://melinasecurity.com/knowledge/china-compliance/) - **Bilingual Reporting** — Findings delivered in the client's preferred language. - **Remediation Re-check** — One vulnerability remediation check round within 60 days. ## Senior Offensive Security Researchers with Proven Track Record Our founding researchers bring international experience in offensive security, red teaming and secure system design — with a proven research track record across IoT, robotics, automotive, web2, web3 and findings in bug-bounty programs. ## Contact **Contact us.** Scope, timing & price finalized after a discovery call. Discovery calls in English & 中文 · Response within 24 hours. - **Partnerships:** partnerships@melinasec.com - **General Enquiries:** contact@melinasec.com - **WeChat:** Exoskelets ## Bilingual - English: [/](https://melinasecurity.com/) - 中文: [/zh/](https://melinasecurity.com/zh/) --- © 2026 Melina Security (Shenzhen) Co., Ltd. · All rights reserved.