# ProvenRun

ProvenRun is a cybersecurity company based in France, founded in 2009. It has 3 products listed on CybersecTools.

> ProvenRun secures IoT embedded systems using formal methods and a certified OS.

Source: https://cybersectools.com/companies/provenrun · Updated February 2026

## Quick facts

- Category: [Cyber-Physical Security](https://cybersectools.com/categories/ot-security)
- Type: Product vendor
- Headquarters: France
- Founded: 2009
- Products listed: 3
- Website: [provenrun.com](https://provenrun.com/)

## What does ProvenRun do?

ProvenRun is a cybersecurity company focused on securing embedded systems for the Internet of Things (IoT). The company develops security software for embedded environments, with its flagship product being ProvenCore, a secure operating system designed for embedded devices such as smartphones, vehicles, and critical infrastructure components.

ProvenRun's core methodology is based on formal methods — a mathematical approach to software verification that checks all execution paths for all possible input variables. This technique is used to produce what the company describes as "secured-by-design" components, aiming to eliminate vulnerabilities at the design stage rather than addressing them reactively after deployment.

ProvenCore has achieved EAL 7 certification under the Common Criteria framework, which is the highest level of security assurance defined by that standard. The company offers multi-layer protection spanning the full embedded system stack, including hardware, drivers, the embedded operating system, middleware, and user-facing applications. Their solutions support multiple hardware architectures, including ARM and RISC-V.

The company's target market includes organizations operating in sectors where embedded system security is critical, such as telecommunications, automotive, and critical infrastructure. ProvenRun positions its offering around a prevention-first security philosophy, using mathematical proofs to reduce the likelihood of software bugs and vulnerabilities in complex embedded environments.

Categories: [Cyber-Physical Security](https://cybersectools.com/categories/ot-security), [Endpoint Security](https://cybersectools.com/categories/endpoint-security), [Application Security](https://cybersectools.com/categories/application-security), [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence)

## ProvenRun products

- [ProvenRun ProvenApps](https://cybersectools.com/tools/provenrun-provenapps): Suite of certified trusted apps for IoT security running on ProvenCore OS. (commercial)
- [ProvenRun ProvenCore](https://cybersectools.com/tools/provenrun-provencore): Formally verified secure OS/TEE for IoT and embedded devices. (commercial)
- [ProvenRun ProvenHSM](https://cybersectools.com/tools/provenrun-provenhsm): Cloud & telecom HSM with formal OS verification, FIPS 140-3 L3, and PQC support. (commercial)

---

More on ProvenRun: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md