A Boutique Firm, Built for One Platform
iRadix is a boutique firm with a single mandate: securing IBM i, and nothing else. We chose this platform because of its outsized role in critical infrastructure, and its outsized neglect in security testing. For more than a decade, our team has worked across IBM i environments worldwide, including engagements delivered on behalf of other cybersecurity firms, building the kind of depth that only comes from sustained, singular focus.
Pioneers in a Platform Few Understood
iRadix traces its roots to a small group of engineers who, over more than a decade, worked across diverse IBM i environments and delivered engagements on behalf of other cybersecurity firms before recognizing that the platform deserved a dedicated practice of its own. At a time when few firms had the depth to test IBM i properly, our founding team became one of the earliest to build a boutique practice built exclusively around it, and we have refined that practice, engagement after engagement, ever since.
Offensive Testers and Auditors, Working as One
Every engagement is staffed by engineers who combine two disciplines rarely found on the same team: offensive testers who think like attackers, and auditors who think like regulators. That combination lets a single team cover both sides of the same risk, technical exploitability and regulatory compliance, without splitting your engagement across separate vendors.
Rigor, Applied to a Neglected Platform
To bring the rigor of modern offensive security to a platform still governed by decades-old assumptions, and to do so with the discretion our clients' environments demand.
We Test the System on Its Own Terms
Our work is grounded in the mechanics of IBM i itself: object authorities, adopted authority, exit points, journaling, IFS structure, and the command-line and network exit programs that generalist tools do not understand. We do not port generic methodology onto your system.
Senior Teams. No Noise.
Every engagement is scoped narrowly, executed manually, and documented with the rigor a regulator or board would expect. We work in small, senior teams, with no junior handoffs and no outsourced testing.
Confidentiality Governs Every Engagement
Our clients operate systems of national and financial consequence. Every engagement is governed by strict confidentiality, and findings are shared only through channels our clients control.
Specialization Does Not Scale
We accept a limited number of engagements each year. This is deliberate: specialization and discretion do not scale, and we have chosen not to compromise either.