Tim Brom
I've spent my career getting inside the systems most people never think to question: vehicle networks, aircraft avionics, medical devices, and the industrial controls running critical infrastructure. Vernda is where I bring that hands-on, adversarial mindset to clients directly, without the overhead of a large firm between us.
Why "Vernda"
Vernda is Old Norse for "to protect." The circuit-tree mark in the logo is drawn in the shape of Algiz (the rune of protection), reimagined as a printed-circuit trace. It's a small detail, but it's the whole thesis of the company: protecting the physical systems people depend on, down at the level of the hardware and firmware that make them run.
How I use AI
AI is a force multiplier in this practice, not a shortcut. It speeds up research and drafting; it doesn't replace judgment, verification, or the work of actually understanding a system. Nothing that reaches a client is AI output with my logo on it.
Force multiplier, not autopilot
AI accelerates research, pattern recognition across large firmware images, and report drafting, letting me cover more ground per engagement. Every technical finding is still verified by hand before it reaches a client.
Local models, data stays put
Sensitive client code, firmware, and case materials are analyzed using AI models running locally on my own hardware, not sent to third-party cloud APIs. Nothing proprietary leaves my systems.
15+ years in embedded systems and security
Owner & Principal Consultant
Independent consulting for connected cyber-physical systems across automotive, heavy trucking, aerospace, medical devices, and industrial control systems: design reviews, penetration testing, security advisory, and expert witness services.
Security Engineer
Built processor emulation and a digital-twin environment for ARM Cortex-R firmware to power next-generation automated firmware fuzzing; analyzed Android and Linux-based hardware for backdoors and malicious code.
Director, Cyber-Physical Systems Security Research
Directed a team delivering 15–20 security research and assessment projects per year across automotive, aerospace, medical devices, and ICS. Led aerospace assessments aligned with DO-326A/DO-356A, performed ICS/OT assessments, and was retained as a testifying and consulting expert witness in automotive cybersecurity litigation.
Embedded Software Engineer
Redesigned Gentex's HomeLink® wireless system and built machine-vision adaptive high-beam features; wrote a VxWorks 653 BSP for a safety-critical PowerPC aerospace platform at Belcan; embedded development at DornerWorks.
Foundations
- M.S., Computer Science, University of Kentucky
- B.S., Computer Science, Calvin College
Speaks the language of regulated industries
Contributing back to the community
A sample of talks, tools, and publications over the years.
- When CAN CANT
- CANT: CAN bus testing tool
- IoT: The S Stands for Security
- On-site Scanning of 3D Manuscripts
- Microwulf: A Beowulf Cluster for Every Desk
Remote & on-site: travel nationwide
Based in Grand Rapids, Michigan, and available for design reviews, testing, and on-site work wherever your systems are.