cybersecdirectory

LegacyMind GmbH provides a firmware security platform that analyses firmware at the binary level.

Categories
Software supply chain and SBOM, Vulnerability management, IoT, embedded and product security, OT and ICS security
Based in
Ingolstadt, Germany
Founded
2025
Ownership
Private

About LegacyMind GmbH

LegacyMind GmbH provides a firmware security platform that analyses firmware at the binary level. It creates software bills of materials, detects vulnerabilities, credentials and hardening gaps, and compares analysed states against new CVEs daily. The analysis works without source code and without agents on the target device. It is manufacturer-independent, hosted in the EU, and rule-based so results can be recalculated. The company sells to device manufacturers, operators of critical infrastructure, managed service providers, system integrators, IT service providers and security consultancies. It also offers a free CRA readiness check. The platform produces a technical report that names the image with its SHA-256, the time and the scope of testing. It prioritises findings by CISA KEV entries rather than by total CVE count. For service providers, it provides a fleet overview that ranks all analysed devices by actively exploited vulnerabilities. Reports include an SBOM in CycloneDX 1.6 format and statements on CRA Annex I and § 30 BSIG. Firmware is deleted after analysis.

Products

Other software supply chain security vendors

See all software supply chain security vendors

Sources

  1. Wikidata
  2. legacymind.de
  3. legacymind.de/anwendungsfaelle/managed-service-provider
  4. legacymind.de/compliance