Finite State
Firmware-based product security platform for connected device makers: SBOMs, vulnerability triage and regulatory compliance evidence
Highlights
- New on EvolcAdded 2026-11-11
Recent signals
What changed at Finite State in the last 6 months, newest first. Each line links to its public source.
- 10 Nov 2026 In the news · Finite State raises $27M Series C finitestate.io
- 10 Nov 2026 In the news · Finite State wins 2026 IoT Industrial Solutions Award finitestate.io
- 20 Oct 2026 In the news · Finite State wins 2026 Top InfoSec Innovator Award finitestate.io
About Finite State
Finite State builds a product security platform for connected devices. It analyzes compiled firmware and binaries without requiring source code, maps the components in each build (including those suppliers did not declare), generates SBOMs and VEX records, and triages vulnerabilities using reachability and exploit context. Its Proving Ground product runs adversarial testing against each build.
Its customers are device makers and their product security teams. The company offers its platform for self-run analysis inside customers' CI and tools, along with managed CRA services and expert-reviewed outputs. It also publishes an API and MCP server for customers' own agents.
Finite State was founded in 2017 and has announced a $27M Series C round. It lists team locations in the United States, the United Kingdom and Singapore. Current open roles include sales, product management, penetration testing engineering, product security consulting and AI/ML QA.
Product: Finite State Platform: firmware and binary analysis producing SBOMs, vulnerability context, reachability insights, compliance reports, plus Proving Ground automated testing.
Jobs at Finite State
More cybersecurity companies
Forcepoint
Data security software that stops sensitive data leaks to AI apps and agents for large enterprisesNew on EvolcForesite
Managed detection and response built on Google SecOps for enterprise security teams, with human-approved AI agentsNew on EvolcFormal
Access-control and network security proxies for enterprises governing employee and AI-agent access to systems and dataYoung companyNew on EvolcFortanix
Data and AI security software for enterprises protecting sensitive information across cloud and on-premises environmentsRemote-friendlyForter
Identity-based fraud prevention and payment optimization software for digital commerce brandsRemote-friendlyFutureFeed
Cybersecurity compliance software for U.S. defense contractors working toward NIST 800-171 and CMMC requirementsNew on Evolc
Website technologies
Tools and platforms detected on this company’s website, grouped by purpose. Dates record when Evolc observed them.
Content management
- SanityMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Page markupsoftware structure signature
- Page markupsoftware structure signature
- Page markupsoftware structure signature
Frontend frameworks
- Next.jsHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
- ReactMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Related technologyimplied by Next.js
- Tailwind CSSMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Page markupsoftware structure signature
- Page markupsoftware structure signature
- Page markupsoftware structure signature
Hosting
- VercelHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Response headerx-vercel-id
- Response headerx-vercel-id
- Response headerx-vercel-id
Privacy & consent
- CookiebotHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
Recruiting
- GreenhouseMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Page markupsoftware structure signature
Website detection does not establish a paid subscription or company-wide use. Tools loaded after consent or sign-in may be missed. “No longer observed” does not prove the company stopped using a tool.