Nanuk IT R&D · Cybersecurity & Engineering

Understand security.
Build better systems.

Technically grounded assessments and clear advice for security-conscious people and small and medium-sized businesses. Supported by applied research, software development and original hardware projects, with an international focus.

  • Evidence-basedDocumented assessments
  • PrioritisedRelevant risks first
  • ClearPractical next steps
  • DirectOne personal contact
For people and businesses

Security that fits the way you work and live.

Your protection needs, technology and available resources determine the starting point. Previous cybersecurity knowledge is not required.

Individuals & professionals

Personal digital security without unnecessary complexity.

Protect accounts, devices and your home network. Develop a practical setup for authentication, communication, backups and recovery.

  • Passkeys & security keys
  • Accounts & devices
  • Password managers
  • Backup & recovery
  • Home networks
Small & medium-sized businesses

Cybersecurity without an in-house security team.

Identify risks, prioritise improvements and make informed decisions. For businesses with limited security experience or little time for implementation.

  • Identity & MFA
  • Endpoints
  • Cloud & SaaS
  • Backups
  • Web & APIs
  • Wi-Fi
Services

Assess. Understand. Improve.

An agreed scope, documented findings and implementation support. Research and development engagements are defined for each project.

01 / Assess

Cybersecurity assessments

Structured examination of configurations, applications, networks and technical attack surfaces within an agreed assessment scope.

  • Agree scope, target systems and protection needs
  • Security analysis and agreed penetration tests
  • Evidence-based findings and risk assessment
  • Prioritised improvements and a closing discussion
Request an assessment
02 / Advise

Security consulting

Technical decision support and practical improvements for individuals, independent professionals and businesses.

  • Security baseline and a realistic roadmap
  • Architecture, hardening and configuration reviews
  • Introduce passkeys, MFA and security keys
  • Setup, operational processes and documentation
Discuss security advice
03 / Engineer

Software & technical development

Project-based development and analysis at the intersection of software, electronics and cybersecurity.

  • Custom applications and automation
  • Embedded systems, interfaces and firmware
  • Technical prototypes and experimental setups
  • Documentation and reproducible testing
Discuss a development project
Original hardware · In development

From circuit design to an original product.

The development approach includes PCB design, firmware and integration of the board and enclosure. The following projects are not products available for sale.

HW / 01
In development

FIDO security key

Development of an original hardware key for strong authentication. Features, supported standards and any certification will be stated only after implementation and verification.

AuthenticationEmbedded securityHardware development
Not available to order
HW / 02
In development

GPS tracker for dogs

Development of a tracking device for dogs. Electronics, power supply, enclosure and connectivity are being investigated. Range, battery life and operating model are not yet defined.

GNSS / GPSElectronicsProduct development
Not available to order
HW / 03
In development

Software defined radio

An original SDR project for radio experiments, signal analysis and research. Architecture, frequency coverage, interfaces and performance remain under development.

Radio technologySignal processingR&D
Not available to order

No pre-orders, shopping cart or delivery commitments. Prices, specifications and sales terms will be published only for products approved for release.

Discuss a technical collaboration
Further areas of work

Technical depth across disciplines.

Activities include research, development, licensing and operation of technical and digital solutions. Deliverables depend on project objectives and feasibility.

Security research

Reproducible experiments, measurement setups and technical analysis in information security and electronic systems.

Reverse engineering

Static and dynamic investigation of software, firmware, protocols and interfaces.

AI & automation

AI applications, data analysis, workflow automation and prototype agent systems.

Web, software & cloud

Applications, websites, hosting and cloud solutions, including operation and licensing of original software.

Hardware & embedded

PCB design, firmware, electronics test setups and hardware hacking for analysis and development.

Games, 3D & digital media

Computer and video games, interactive applications, 3D content and digital products, from prototypes to publication.

Approach

Technical findings. Practical decisions.

An assessment or research project should produce more than a list of observations. What matters is the defensible action that follows.

  • Scope & contextDefine target systems, authorisations, assumptions and limits upfront.
  • Assessment & evidenceDocument methods and findings, and establish their relevance.
  • PrioritisationBalance risk, effort, dependencies and achievable impact.
  • HandoverDeliver a report, roadmap, prototype or technical documentation.
Research & lab

Independent technical investigations.

Ongoing internal research, not completed client engagements. Results are described only once they have been developed and validated.

Ongoing research

UWB research

Investigating ultra-wideband sensing across different positions, movements, materials and environmental conditions. The focus is on reproducible measurements, limitations and possible applications.

UWBSensingExperimental design
Ongoing research

Wi-Fi assessments

Developing reproducible wireless test environments to evaluate configuration, authentication, client behaviour and segmentation. The aim is documented findings and practical hardening.

Wi-Fi802.11Wireless security
Qualifications
SEC / 01IT-Security-Beauftragter (TÜV Rheinland)Valid personal qualification
SEC / 02CompTIA Security+Valid personal qualification
SEC / 03CompTIA PenTest+Valid personal qualification
SEC / 04GIAC GAWNValid personal qualification

These qualifications are held by Marc-André Gonser. They are not company or product certifications.

Experience

Security, software and systems in one technical profile.

Marc-André Gonser combines software development experience, including embedded systems, with work as an Information Security Consultant in the insurance industry. Nanuk IT R&D is a sole proprietorship not entered in the German commercial register.

Software & Embedded
Information Security Consulting
Applied R&D
FAQ

Before your first enquiry.

Yes. Account protection, passkeys, security keys, password managers, device and home-network security, backups and recovery are all relevant topics.

The scope is agreed in advance. Typical deliverables include findings, technical evidence, a risk assessment, prioritised improvements and a closing discussion.

No. The original hardware projects are still in development. There is no ordering facility, confirmed pricing or delivery date.

Yes. The website and enquiry form are available in German, English and Russian. Project language, delivery and scope are agreed individually.

The first enquiry is for initial context only. A suitable transfer method is then agreed for credentials, technical samples and confidential documents.

Nanuk IT R&D

What technical question would you like to resolve?

A brief description of your situation and objective is enough to start a conversation. An enquiry is not an order or automatic engagement.

Discuss a project