Humanoid robotics · Firmware audited, part by part · The Plains, Virginia
Audited Robotics
Verified. Not trusted.
A humanoid with one door to the internet, and it runs on NVIDIA Jetson.Every other part sits on a sealed wired bus, gets a 48-hour traffic test, and goes into a dated security log. We don’t ask you to trust the firmware. We show you the log.
1
Door to the internet
23
Joints, each bus-tested
48 h
Traffic capture per part
0
Radios on the robot bus
Know what you are plugging in
Buy audited. Not a backdoor.
A humanoid on your floor has cameras, microphones, a map of your building and motors strong enough to hurt someone. In July 2026 the FCC added Chinese-made robots with built-in radios to its Covered List. This is why.
| Chinese-made robot | Audited Robotics | |
|---|---|---|
| Doors to the internet | Wi-Fi, Bluetooth and a cloud account, all live out of the box. | One. The Jetson, and it can only reach addresses we allow. |
| Phoning home | Unitree humanoids were reported sending data back every five minutes. | Every part captured for 48 hours. Pass means nothing leaves. |
| Bluetooth | The UniPwn flaw gave strangers root control of Unitree robots over Bluetooth. | No Bluetooth on the robot. Not even in the battery. |
| Remote access | A hidden remote-access tunnel (CloudSail) was found in the Unitree Go1. | No inbound connections from the internet. Commands come only from your own controller. Third-party drivers will be available for Crestron, Control4 and other automation systems. |
| Firmware | A closed factory image you cannot inspect. | Unpacked, scanned for backdoors, wiped and reflashed with our build. |
| Stop button | Software decides whether the motors stop. | A hardware switch cuts motor power. No firmware in the path. |
| Proof | Trust us. | A dated security log for every robot. |
Assembled, tested and logged in Virginia. All computing US-designed. The joint motors we use today have no radio and sit on a sealed wire, and we are working toward American-made joints.
Sources: Recorded Future · Interesting Engineering · Digitimes · TechTimes, FCC Covered List
One door. Everything else sealed.
Most robot backdoors found so far came in over Wi-Fi, Bluetooth or a cloud link. So the robot gets exactly one of those, and it is the computer we flash ourselves.
NVIDIA Jetson brain
The only device with a network connection. We flash NVIDIA’s official JetPack image ourselves and install only what the robot needs.
Sealed robot bus
Motors, grippers, IMU and the walking computer talk to the Jetson over CAN, RS485 and USB wire. No router, no internet, IP forwarding off.
Outbound allowlist
The router lets the Jetson reach the Claude API and approved update servers. Everything else is blocked and logged.
Hardware stop
The button on the robot and the wireless e-stop open the motor-power contactor directly. No firmware sits in that path.
What the security log looks like
Every robot ships with its own. Each line is a test we run, with the date and the result.
$ audited –robot AR-001 –log
[bench] motors x23 ……….. 48h capture · outside contacts: pending
[bench] grippers x2 ………. 48h capture · outside contacts: pending
[scan] walking computer ….. binwalk + EMBA · report saved: pending
[flash] walking computer ….. radios removed · SHA-256 recorded: pending
[flash] jetson …………… JetPack clean install: pending
[net] robot VLAN ……….. inbound from your controller only: pending
[stop] e-stop …………… 10/10 cuts motor power: pending
[robot] whole robot ………. 48h capture · only the Jetson talks out: pending
> build in progress. results post as each test runs._
How a robot gets audited
1Test every part on the benchEach part runs on an offline network for 48 hours while Wireshark records every packet. Pass means no attempt to reach anything outside.
2Scan the one foreign computerThe walking computer’s factory image is unpacked with Binwalk and scanned with EMBA for backdoors, built-in passwords and hidden services.
3Wipe it and flash our buildWi-Fi and Bluetooth drivers removed, no cloud services. The file’s checksum goes in the log.
4Test the whole robotAssembled and powered for 48 hours on its own VLAN. Pass means only the Jetson talks outside, and only where we allowed.
5Re-run on every updateNew firmware goes through the same scan before it touches the robot.
38.86° N · 77.77° W
Hand built in The Plains, Virginia.
Verified on our bench. Delivered to your facility.
01
Hand built
Every robot is assembled by hand in The Plains, Virginia. One bench, one builder, every screw in order.
02
Verified
Every part tested, every computer wiped and reflashed, the whole robot watched for 48 hours before it leaves.
03
Delivered
Crated, shipped and set up at your facility, with its security log in the box.
Investor, supplier or security researcher?
Ask for access to the private build page, the security plan and the parts list.