SERVEXO
Field service management platform
One platform for work orders, technician dispatch, scheduling and reporting, in Arabic and English.
IoT security and integration
Secure MQTT & Node-RED Monitoring
Authenticated, encrypted IoT messaging with per-topic access control, message integrity checks and attack simulation.
Overview
A hardened smart-home messaging layer. Python device clients publish to a Mosquitto broker that enforces authentication, per-topic ACLs and TLS, with AES-256 payload encryption and HMAC-SHA256 integrity on top. A Node-RED dashboard monitors the devices, and dedicated scripts simulate attacks and load.
The challenge
Default MQTT setups accept anonymous clients, send plain text and let any client read any topic. Closing those gaps has to be proven with repeatable tests, not just configuration.
Our approach
Key capabilities
- Shared secure client for smart light, door lock and camera
- AES-256 payload encryption and HMAC-SHA256 integrity over TLS
- Mosquitto authentication, ACL and TLS configuration
- Attack simulation and performance testing scripts
- Node-RED device and security dashboard
Inside the project
Outcomes
- Unauthorised unlock commands are rejected at the broker
- Tampered payloads fail the integrity check
- Encryption overhead measured: about 42 ms per message against 25 ms unencrypted
Technology
Try it
Related projects
Industrial Pulse
Industrial IoT condition monitoring
From sensor to screen: equipment telemetry over MQTT, stored in PostgreSQL and monitored live on a bilingual dashboard.
Full-Stack IoT Monitoring Platform
Full-stack IoT software
Device registry, live readings, analytics and alerts for building sensors, in one web platform.
Not sure where your project fits?
Tell us where you are starting. We reply with the simplest sensible scope.
Start a project