.webp)
At Binarly, we’ve worked diligently to develop innovative solutions that deliver exceptional results for our customers. In our previous release of the Binarly Transparency Platform v2.5 – we introduced several standout features, including Binary Reachability Analysis and Cryptographic Materials discovery, as well as our patented, most comprehensive CBOM generation capabilities. What truly distinguishes us in the market is our deep visibility into actual code, enabling security teams to act on accurate, actionable insights.
Today’s software supply chain is increasingly complex and sprawling, making it a prime target for threat actors looking to expand their attacks through suppliers. Our product strategy empowers enterprises to SEE every aspect of their software supply chain, FIX vulnerabilities as they arise, and COMPLY with evolving regulations.
Let’s begin with the most innovative features in this release: cryptographic asset reachability analysis and PQC compliance.
As quantum computing advances, the National Institute of Standards and Technology (NIST) has issued fresh guidance on Post-Quantum Cryptography (PQC), underscoring the urgency of PQC readiness amid deadlines and regulations. Transitioning large enterprises to meet these new requirements is a lengthy, often complex process. Which assets, for example, are truly crucial for ensuring a smooth a secure shift to the post-quantum era?
Building a well-structured and robust inventory is a top priority for PQC readiness. The Binarly Transparency Platform not only discovers certificates and cryptographic keys within firmware images or container file systems, but goes a step further by analyzing code to map the cryptographic assets embedded in binaries and software packages.
Our new cryptographic reachability analysis helps cut through the noise. For example, when OpenSSL is statically linked, traditional Software Composition Analysis (SCA) tools often generate hundreds of false positives tied to OpenSSL libraries that aren’t actually used in the code. Cryptographic Reachability lets you validate those findings, helping security teams focus on what truly matters.
One of the most important tasks for any enterprise is planning and executing the discovery of outdated algorithms and cryptographic assets that need replacing or upgrading. For a comprehensive risk assessment, it’s essential to continuously monitor the assets – both for proactive risk management and for compliance – by tracking progress toward quantum readiness.
The Binarly Transparency Platform is a data platform that helps identify the most critical data insights related to software supply chain security risks. We help software developers and enterprises ensure that vendors and suppliers follow Secure by Design principles and the Secure Software Development Framework (SSDF).
Identifying unsafe functions (CWE-676) in products or components broadly used across enterprise infrastructure is key to revealing which suppliers fail to adequately support their codebases or comply with Secure Software Development Lifecycle (SSDLC) practices. Although discovering these unsafe functions may not always lead to security vulnerabilities, it remains crucial to measure and monitor such risks and codebase health in the context of Secure-By-Design compliance.
We don’t just detect unsafe functions in specific software components; we also identify what those functions are and where they reside in the code. This level of detail makes it actionable for deeper investigation or risk assessment across targeted codebases or compiled components.
In particular, this is especially useful for tracking SLAs with third-party software and managing wider risks across the software supply chain.
All of these findings are vital for ensuring visibility and understanding risk, but it’s equally important to effectively navigate, prioritize, and share them with the right stakeholders. In response to customer feedback on the previous version, we’ve completely redesigned and rebuilt our reports – equipping teams with enhanced transparency and compliance tools across the software supply chain.
At Binarly, a pioneering spirit is one of our core values – fueling our commitment to deliver the most effective and innovative products on the market. The all-new Binarly Transparency Platform v2.7 contains major capabilities to help security teams more efficiently identify and resolve critical issues related to software supply chain security. Tis release scales Secure by Design principles for both development and procurement teams, enabling them to address the most pressing software supply chain gaps. Stay tuned for v3.0, coming soon! 🤙
Binarly Transparency Platform v2.7 introduces new features, performance upgrades, and critical updates to better support software supply chain transparency, vulnerability remediation, and regulatory compliance.
New features
