FACT (Firmware Analysis and Comparison Tool) is a SaaS platform designed for continuous software supply chain monitoring, with a focus on IT, IoT, and OT environments. **Binary & Metadata Composition Analysis:** FACT performs Binary Composition Analysis (BCA) on binary files without requiring source code, making it applicable to legacy industrial control systems. It extends this with Metadata Composition Analysis (MCA), which uses release files, end artifacts, and integrated SCA feeds to produce vulnerability insights based on metadata. **Vulnerability & CVE Tracking:** The platform tracks CVEs, CPEs, and vendor security advisories at scale — processing approximately 267 advisories and 73,354 CPE-to-CVE associations per day. In 2022, it tracked over 102,000 new or updated CVEs and more than 28 million CPEs. **AI/ML-Enhanced Correlations:** FACT applies AI and ML to correlate vulnerabilities with products across multiple feeds, including vendor announcements and text-based sources, accounting for historical M&A activity, rebranding, and inconsistent naming. **Platform & OS Agnostic:** Supports analysis across Windows, QNX, Linux, and other RTOSs, as well as custom file formats, providing a unified view for PSIRTs and product management teams. **API Integration:** A full-featured RESTful API exposes all portal data for integration with corporate systems and workflows. API communications are encrypted with TLS 1.2+ and use OAuth 2.0 for authentication. **Security & Access Controls:** Hosted on AWS, the platform employs logical data separation, RBAC for granular access control, and undergoes regular third-party penetration testing.