binary analysis

Atredis Partners is a 100% worker-owned, research-driven information security firm offering customized security assessments and consulting. The company provides application security, AI and machine learning security, cloud and infrastructure security, embedded and hardware security, OCP SAFE assessments, adversarial services and penetration testing, and risk and advisory services. It has delivered public security research on products from Google, Microsoft, Lenovo, Motorola, Samsung and HTC, and received four research grants from DARPA.

hardware and firmware reverse engineeringPenetration Testingprotocol analysisRed Teamingreverse engineeringsecurity assessmentsthreat modelingvCISO advisoryvulnerability research

RevEng.AI is a cybersecurity company building a binary intelligence platform and foundational AI models for reverse engineering and binary analysis. Founded in 2023 by Dr James Patrick-Evans, it lets security operations, threat research, and product security teams analyze compiled executables without source code, identifying vulnerabilities, malware, and hidden threats in software supply chains.

agentic malware analysisAI decompilationautomated remediationreverse engineeringsemantic code searchsoftware supply chain verificationvulnerability researchYARA rule generation

BlueRISC is an advanced cyber-security technology company founded in 2002 that develops AI-driven system assurance solutions, including vulnerability analysis, runtime protection, trusted execution, and post-attack forensics for defense, automotive, nuclear I&C, and other high-consequence systems. Its technologies are deployed by customers in 21 countries, and it has worked with DARPA, OSD, Air Force, MDA, Navy, and DHS.

agentic AI validationAI/ML spoof detectioncyber forensicselectromagnetic IC analysisencrypted emailFPGA accelerationLLM-driven reasoningruntime protectionsecure processor design

Deepbits Technology Inc. is a cybersecurity company of security researchers and engineers developing binary and AI analysis techniques (program analysis, virtualization, machine learning/deep learning) to solve computer and software security problems. It offers agentic binary analysis powered by LLM models and proprietary tools, and applies patented technology to expose software composition and dependencies, vulnerability discovery, program hardening, digital forensics and malware detection.

AI/LLM-based analysisbinary diffingDigital Forensicsdisassemblymachine learning/deep learningmalware detectionprogram analysisprogram hardeningSBOM generationvirtualizationvulnerability discovery

Beryllium DAP provides intent-based analysis for binaries and smart contracts. The platform surfaces potential behaviors and supporting evidence to help analysts investigate PE, ELF and .NET files, and supports smart contract review. The company also conducts security research, with vulnerabilities credited to Beryllium and reported to vendors.

security researchsmart contract analysisvulnerability discovery

Eclypsium is a cybersecurity company that protects critical software, firmware, and hardware in enterprise and national infrastructure. Founded in 2017 by Yuriy Bulygin and Alex Bazhaniuk, it provides a platform for visibility, vulnerability assessment, integrity monitoring, and remediation across endpoints, servers, network devices, AI infrastructure, and enterprise IoT, addressing hardware supply chain risk.

automated firmware updatebehavioral analysiscompliance reportingdevice cleansing and data sanitizationfirmware analysisintegrity and change monitoringRESTful APIsstatic analysisvulnerability assessment

Emotion Labs is a company specializing in program analysis that uses cutting-edge program analysis techniques to eliminate flaws in customer understanding of their software and eliminate vulnerabilities. They offer customized training courses on modern binary analysis techniques, including automated program analysis with angr, and develop customized program analysis solutions tailored to client needs. They open-source much of their work, including the angr program analysis platform.

automated program analysisprogram analysistrainingvulnerability detection

Finite State provides an AI-native Product Security OS for connected devices, automating security and compliance workflows grounded in real product artifacts. Its platform covers threat modeling, SBOM generation from firmware, binaries, and source code, reachability analysis, VEX, and traceable compliance reporting aligned to frameworks such as EU CRA, FDA cybersecurity guidance, and NIST. It also offers practitioner-led product security services including regulatory readiness, pentesting, and certification accelerators.

compliance reportingfirmware analysispentestingreachability analysisRed TeamingSBOM generationsource code analysisthreat modelingvulnerability triage