Audit client firmware. Hand over the CRA report.
Upload your client's firmware, get a free summary of what we found, and buy the full CRA remediation report to hand to the manufacturer. No subscription -- you pay only for the reports you need.
The EU Cyber Resilience Act is coming. Is your firmware ready?
Starting December 2027, all connected products sold in the EU must comply with mandatory cybersecurity requirements -- including vulnerability management, SBOM documentation, and security-by-design principles.
Hidden vulnerabilities
Your firmware likely includes dozens of open-source components with known CVEs. Manual audits miss them. Attackers won't.
No SBOM, no market access
The CRA requires a machine-readable software bill of materials for every product. Generating one from compiled firmware is hard without the right tools.
Fines up to EUR 15M
Non-compliance penalties can reach EUR 15 million or 2.5% of global turnover. Start your compliance journey now -- not when auditors come knocking.
How it works
From client firmware to a CRA report in three steps
Upload
Upload your client's firmware image -- raw binary, ELF, Intel HEX, or compressed archives. We accept images up to 500MB from any embedded platform.
Scan
Our analysis engine extracts the filesystem, identifies components, matches CVEs, and scans for hardcoded credentials and crypto weaknesses. You get a free summary of the findings.
Buy the report
Pay once per report for the full CRA remediation report: CycloneDX SBOM, CVE findings ranked by severity, and a compliance assessment to hand to the manufacturer, with a VAT invoice.
Capabilities
Everything you need to secure your firmware
Deep binary analysis powered by industry-leading tools, purpose-built for the embedded and IoT ecosystem.
SBOM Generation
Automatically generate a complete Software Bill of Materials from your firmware binary. Export in CycloneDX 1.5 or SPDX 2.3 format for supply chain transparency.
CVE Detection
Cross-reference every identified component against the NVD and vendor advisories. Get CVSS scores, exploit availability data, and remediation guidance for each finding.
Credential Scanning
Detect hardcoded passwords, API keys, private keys, and default credentials embedded in your firmware. Find secrets before attackers do.
CRA Compliance
Validate your firmware against EU Cyber Resilience Act requirements. Get a compliance checklist, gap analysis, and exportable audit documentation.
Crypto Audit
Identify weak or deprecated cryptographic algorithms, insufficient key lengths, and insecure TLS configurations in your firmware stack.
CI/CD Integration
Integrate security scans into your build pipeline with our REST API and CLI tool. Fail builds that don't meet your security policy thresholds.
PDF Reports
Generate professional, branded PDF reports ready for auditors, customers, and regulatory bodies. Include executive summaries and technical deep-dives.
Pricing
Pay per report
Every scan comes with a free summary. Buy the full report when you need it. No subscription.
Full report
The free summary is always included. Pay only for the reports you need.
—
per report, one-time
- Every vulnerability with CVSS scores
- Full component inventory
- Credential and binary security findings
- CRA compliance checklist with evidence
- PDF report and CycloneDX SBOM
- VAT invoice for every purchase
Deliver the CRA report your client needs.
Upload firmware, see the free summary, and pay only when you buy the report. Refunded automatically if the analysis fails.