Cyber Security

IoT security: protect everything on your network — not just the computers

Your servers and laptops aren’t the only things connected to the internet. Your heating, lighting, door access, alarms, cameras, locks and fridges are too — and every one of them can be attacked. We find, assess and monitor the connected devices across your organisation, and tell you plainly where you’re exposed.

A small fee for a lot of reassurance

Why Foresight

  • Cyber Essentials Plus certified
  • Supporting 130+ organisations since 2006
  • We scan beyond just laptops & servers
  • Plain-English, no jargon

Quick answer

IoT security protects the “Internet of Things” — the internet-connected devices in your building that aren’t traditional computers, such as heating, lighting, door-access systems, alarms, CCTV, smart locks and refrigeration. Because these devices are online, they can be hacked and controlled remotely — even when they hold no data at all — causing physical disruption, safety risks and real financial loss. IoT security means knowing every connected device you have, checking it for vulnerabilities, keeping it patched and segmented, and monitoring it for attack.

A real-world wake-up call

When hackers cooked the fridges

In October 2026, attackers broke into the refrigeration systems of hundreds of French supermarkets and heated the fridges to 50°C for six hours — spoiling millions of euros of food and even starting fires. No data was stolen; the target was a fridge. It’s the clearest warning yet that anything connected to the internet can be attacked, whether or not it holds data. We wrote about what it means for every business in when hackers cooked the fridges.

What counts as IoT

It’s already live in your building

The Internet of Things is running in your organisation right now — usually without anyone treating it as “IT.” Any of these, connected to your network, is in scope:

Connected deviceWhat an attacker could do
Heating & air-con (HVAC)Switch it off in winter (burst pipes) or drive it to extremes
Door-access systemsUnlock doors, or lock people out — a safeguarding and security risk
Alarms & CCTVDisable alarms or blind cameras during an incident
Smart locksOpen or seal doors remotely
LightingPlunge a site into darkness or disruption
RefrigerationSpoil stock and cause losses — exactly what happened in France
Building management systemsTake control of multiple building services at once
Shadow IoT (smart plugs, webcams, voice assistants)Create an unmonitored way onto your network

What we do

Our IoT security process

StepWhat it means
1. Discover & inventoryWe find every connected device on your network — most organisations don’t have a list
2. Assess & scanWe extend our endpoint vulnerability scanning to your connected devices, checking for known flaws, default passwords and missing updates
3. Segment & hardenWe put IoT on its own network segment so a breached device can’t reach your data or critical systems — then change defaults and patch
4. Monitor & adviseWe keep watch for suspicious behaviour through our 24/7 monitoring and tell you plainly what to fix first

In short: IoT security is the same discipline as our vulnerability scanning for laptops and servers — extended to every other connected thing in your building. One view of your whole attack surface, not just the obvious bits.

Why it matters

The stakes are physical, not just data

This isn’t about spreadsheets. In a school, a hijacked door-access system is a safeguarding emergency, and heating switched off over winter closes classrooms and bursts pipes. In a hospital or care setting, connected building systems and equipment make the stakes about safety, not money. In any office or shop, it’s locked-out staff, tripped alarms, spoiled stock and downtime. And the uncomfortable truth from France: the weakness had been flagged months earlier and a fix existed — it simply wasn’t acted on. That’s what monitoring and patching prevent.

FAQs

Common questions

What is IoT security?
IoT security protects the internet-connected devices in your building that aren’t traditional computers — heating, lighting, door access, alarms, CCTV, smart locks and refrigeration — by finding them, checking them for vulnerabilities, keeping them patched and segmented, and monitoring them for attack.
Why do IoT devices need protecting if they hold no data?
Because they can be controlled remotely to cause physical harm — unlocking doors, disabling alarms, switching off heating, or spoiling stock. The October 2026 French supermarket attack caused millions in losses and fires without stealing any data.
How do you secure IoT devices?
We discover and inventory every connected device, extend our endpoint vulnerability scanning to them, segment them onto their own network so a breach can’t spread, change default passwords, patch, and monitor for suspicious activity.
What is “shadow IoT”?
Shadow IoT is connected kit that’s plugged into your network without IT’s knowledge — a smart plug, a webcam, a voice assistant someone brings in. It’s an unmonitored door onto your network, so it should be checked before it’s connected.
Is IoT security expensive?
No — it’s a small, proportionate fee for the reassurance of knowing your whole attack surface is covered, and far cheaper than the disruption of a hijacked building system. Ask us for a quote.

Know what’s connected. Know you’re safe.

Find out what’s on your network and where you’re exposed — start with a free external risk scan, or talk to us about IoT security.