Once firmware has been identified, Eclypsium makes it easy to verify the security posture and integrity of firmware within enterprise devices. The platform automatically reveals devices with outdated or vulnerable firmware or misconfigurations that could put the device at risk. Next, Eclypsium can automatically verify that firmware has not been unexpectedly altered or compromised by either known or unknown threats.
Assessing Firmware Risk
All code is susceptible to vulnerabilities, yet firmware is often beyond the reach of traditional vulnerability scanners. Eclypsium gives deep insight into the security posture of all devices and any potential risks.
Find Vulnerabilities
Find devices and components with vulnerable or outdated firmware that are often missed by traditional software vulnerability scans.
Find Misconfigurations
Find configuration issues that can put the device at risk such as disabled BIOS write protections or unlocked components.
Focus on Risk
Quickly find all devices with a specific CVE or sort devices by overall risk, OS, group, vendor, product, component, or security feature. Focus on vulnerabilities being used by real-world threats such as ransomware.
Establishing Device Baselines
Enterprise firmware and device configurations should remain highly predictable. Eclypsium lets security teams define the appropriate states for their devices and alerts to any unexpected changes.
Automatically learn baselines for all devices and component firmware.
Ensure firmware matches valid, vendor-approved firmware.
Quickly identify when high-value systems have any unexpected or unplanned changes.
Detecting Threats
Any threats at the firmware level are uniquely powerful – giving an attacker full control of the device and the ability to persist and evade security. Eclypsium brings the firmware expertise to find even the most sophisticated firmware threats.
Any threats at the firmware level are uniquely powerful – giving an attacker full control of the device and the ability to persist and evade security. Eclypsium brings the firmware expertise to find even the most sophisticated firmware threats.
Detect Unknown Binaries
Leverage the industry’s most extensive library of vendor firmware to find unexpected or altered firmware.
Detect Known Threats
Detect known threats such as rootkits, hardware implants, and backdoors. Easily define their own firmware-specific YARA rules.
Detect Unknown Threats
Identify anomalous behavior or functionality that can indicate a potential threat. Collect firmware for further Eclypsium analysis.
Assuring Compliance
Firmware is now in scope for most modern security frameworks and regulations. Eclypsium gives organizations the tools to extend their compliance efforts to firmware just as they do for their operating systems and traditional software.
Align with leading security frameworks and regulations that specify the need of firmware security such as the NIST Cybersecurity Framework, NIST 800-53 R5, PCI, FISMA, and others.
Simplify compliance efforts by demonstrating ongoing systems and controls to maintain inventory, manage risks, and detect threats.
Verifying the Supply Chain
Enterprise firmware and device configurations should remain highly predictable. Eclypsium lets security teams define the appropriate states for their devices and alerts to any unexpected changes.
Evaluate Vendors for Vulnerabilities
Easily check prospective products and vendors for vulnerabilities or weaknesses during evaluation.
Verify SBOM and Detect Changes
Proactively identify any changes to device software or components as vendors update products or change suppliers.
Remotely Verify Newly Delivered
Devices – Directly ship devices to remote workers or sites and verify that devices were not altered in transit.