RunSafe Security
Generates SBOMs for embedded code and hardens vehicle ECU software against memory-based exploits at runtime.
- Categories
- Software supply chain and SBOM, Automotive cybersecurity, Endpoint protection and antivirus, IoT, embedded and product security
- Based in
- McLean, United States
- Ownership
- Private
About RunSafe Security
RunSafe Security provides cybersecurity for embedded systems. It sells three named products. RunSafe Identify creates build-time software bills of materials for C and C++ and firmware. RunSafe Protect reduces exploitability by relocating software functions in memory each time code runs. RunSafe Monitor tracks crashes to spot threats and filter false alarms. The company serves teams that build critical embedded products, including medical device makers, automotive manufacturers, aerospace developers, defence programmes and energy infrastructure firms. Its tools work with operating systems such as Yocto, QNX, Linux, VxWorks and Windows, and with CI/CD pipelines. No source code changes are needed. The platform supports compliance with rules such as the EU Cyber Resilience Act, FDA requirements, ISO/SAE 21434, ISO 26262, DO-178C, NIST 800-53 and IEC 62443-4. RunSafe says customers save an average of 2.08 million dollars per year, cut zero-day exposure by 90 per cent and increase automated mitigation by 50 per cent.
Products
- RunSafe IdentifyGenerates build-time software bills of materials for embedded software and firmware, finds vulnerabilities and outputs CycloneDX formats.
- RunSafe ProtectReduces exploitability in legacy and embedded software by relocating functions in memory at load time, without changing source code.
- RunSafe MonitorTracks software crashes to identify potential threats and filters out false positives for faster incident response.
Ownership and deals
- Raised $12m in a Series B roundInvestors Critical Ventures and SineWave VenturesReport on the RunSafe Security funding round of September 2024 (opens in a new tab)
- Raised $9.7mReport on the RunSafe Security funding round of May 2024 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.