To assist independent security researchers in navigating the complexities of iOS security, Apple has launched the Security Research Device (SRD) Program. The initiative provides eligible participants—including both new and experienced researchers—with specialized hardware designed specifically for deep system analysis. Unlike standard consumer devices where many internal layers are locked down by default, these SRDs allow researchers to perform extensive work on all iPhone components except for third-party apps and Apple Pay.
The SRD allows researchers to perform extensive work on all iPhone components except for third-party apps and Apple Pay.
The core mechanism of the SRD involves 'fusing' specific configurations into the hardware to provide elevated privileges while maintaining an environment suitable for controlled research. Participants gain unique technical capabilities such as full shell access, the ability to run arbitrary tools, the power to choose their own entitlements, and even the capacity to customize the kernel. Furthermore, the program offers perks beyond just raw hardware access, including early access to software previews, participation in security beta projects, and entry into a community of fellow researchers equipped with special tooling to augment bug hunting.
The initiative provides eligible participants—including both new and experienced researchers—with specialized hardware designed specifically for deep system analysis.
Despite these expanded permissions, there are significant operational constraints built into the program. The SRDs are provided as 12-month renewable loans and must remain under the ownership of Apple at all times; they cannot be used for personal use or daily carry and must stay on the premises of authorized participants. While this setup allows researchers to report findings confidently without risking the loss of access to inner OS layers, it creates a walled garden for discovery: any vulnerabilities found using the device are eligible for the Apple Security Bounty, but the researcher is restricted from taking the device outside of approved environments. This approach highlights the trade-off between providing high-level system transparency for safety improvements and maintaining strict control over the physical distribution of modified hardware.