Finite State

About Finite State

Finite State provides a product security operating system for connected devices. It sells to manufacturers in regulated industries such as medical devices, automotive, energy, and government. The platform analyses firmware, binaries, and source code to create a software bill of materials and a record of what actually ships. It uses reachability analysis to prioritise vulnerabilities that are exploitable, reducing noise from scanner findings. The system also generates evidence for compliance and customer assurance, keeping it current as products change. Services include regulatory readiness, penetration testing, and certification support.

Products

• Finite State PlatformAnalyses firmware, binaries, source code, and supplier SBOMs to produce a system of record for shipped software.
• Assurance StudioGenerates and maintains evidence for regulatory, customer, and internal assurance workflows.
• AgentOSPart of the product security OS that supports autonomous, review-gated workflows.
• Finite State CopilotAn AI-native component that assists with product security tasks.

Ownership and deals

1. June 2024Finite State acquired MergeBaseReport on Finite State buying MergeBase (opens in a new tab)
2. March 2024Raised $20mInvestor Energy Impact PartnersReport on the Finite State funding round of March 2024 (opens in a new tab)

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

Other software supply chain security vendors

• Trail of Bits
• PCA Cyber Security
• AISLE
• Aqua Security
• Black Duck
• Checkmarx

See all software supply chain security vendors