Penumbral Labs
Penumbral Labs helps manufacturers prepare connected products for EU Cyber Resilience Act compliance through testing and support.
- Categories
- Penetration testing, IoT, embedded and product security, Vulnerability management, Compliance audits (SOC 2, ISO 27001)
- Based in
- Differdange, Luxembourg
- Founded
- 2026
- Ownership
- Private
About Penumbral Labs
Penumbral Labs helps manufacturers of connected products prepare for the EU Cyber Resilience Act. It sells readiness assessments, hands-on product testing and ongoing vulnerability handling. Its clients are manufacturers who must meet the CRA essential requirements before December 2027. The work is delivered by an offensive-security specialist rather than a checklist. The company tests products as an attacker would, finds exploitable weaknesses and provides evidence and a plan to fix them. It offers fixed-scope, fixed-price engagements quoted per product. It also runs a free self-check and a free 30-minute Article 14 drill. The company says it provides offensive-security rigour without the price or timeline of a large consultancy.