Binarly

Binarly is a firmware and software supply chain security platform that performs binary analysis across multiple firmware formats and cloud workloads. It offers tiered packages: a free tier (Binary Risk Hunt), Enterprise, and Advanced.

The platform supports analysis of multiple firmware formats including UEFI, BMC, RTOS, and Embedded Linux, as well as cloud containers.

**Vulnerability Management:** Binarly identifies known and unknown vulnerabilities, performs direct and transitive dependency analysis, and provides remediation prioritization using EPSS, SSVC, and CISA KEV frameworks. Reachability analysis is available in the Advanced tier.

**Compliance:** The platform generates and validates SBOMs (Software Bill of Materials) and CBOMs (Cryptography Bill of Materials), and supports OSS license compliance checks.

**Secure-By-Design:** Features include cryptographic materials management, detection of mitigation failures and weak binaries, and embedded secrets detection.

**Threat & Risk Hunting:** Custom detection rules are available in the Advanced tier for threat, risk, and vulnerability hunting.

**Additional Capabilities:** All tiers include API and CLI access. The Enterprise and Advanced tiers also include an AI Chat Assistant, triaging support, and debug symbols support. The Advanced tier additionally provides early access to threat intelligence.