“Binarly’s binary code analysis is extremely effective in finding vulnerabilities in upstream libraries, where source access may not be possible. When Binarly found unknown vulnerabilities in our BIOS, they provided detailed information including where the vulnerability was and the impact associated with it. They then worked directly with our BIOS vendor to fix the vulnerabilities upstream.”
Kieran Levin,
Lead System Architect, Framework
The Challenge
Without granular insights into the firmware supply chain, detecting and fixing hidden vulnerabilities can be nearly impossible
Devices need continuous protection as security vulnerabilities emerge over time.
ODM (Original Design Manufacturer), IBV (Independent BIOS Vendor), and SoC vendors each introduce potential security risks.
Business-to-business customers require verifiable evidence of ongoing firmware security updates and policies.
Without granular insights into the firmware supply chain, detecting and fixing hidden vulnerabilities can be nearly impossible
Solution
Framework engaged with Binarly to incorporate a robust vulnerability scanner directly into their firmware development and release processes. The Binarly Transparency Platform provides:
Framework used Binarly’s patented technology to automate the detection of vulnerabilities across BIOS binaries, pinpointing the exact modules or lines of code in question
Framework’s internal security team was able to map out security gaps at each layer—ODM, IBV, and other third-party libraries—and act on mitigation guidance with clarity on where and how to patch issues.
Quick identification of weaknesses speeds up the collaboration process between Framework and its vendors, ensuring security patches arrive before vulnerabilities are exploited.
Binarly’s insights help Framework craft a detailed firmware security policy, critical for demonstrating robust practices to enterprise clients.
Results
Thanks to Binarly, Framework can confidently offer a more secure, future-proof product line with best-of-breed technologies:
Rapid Vulnerability Detection
Previously unknown bugs now surface swiftly, giving Framework the upper hand against emerging threats.
Stronger Customer Assurance
Previously unknown bugs now surface swiftly, giving Framework the upper hand against emerging threats
Ongoing Protection for Long-Lived Devices
Continuous updates keep hardware safe, aligning with Framework’s commitment to sustainability.
Conclusion
Get started today, Ship and Buy Software You Can Prove Is Safe
Book a live tour to watch Binarly validate SBOM/CBOM, surface exploitable risks with reachability and exploitation maturity scoring, and chart a measurable path to post‑quantum readiness.