Eclypsium provides a supply chain security platform that continuously monitors hardware, firmware, and software components within IT infrastructure to ensure their integrity and authenticity. The platform addresses vulnerabilities and threats at the component level, enabling organizations to maintain secure and compliant systems against low-level cyber threats.
Funding
$84.2M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Organizations face increasing cyber threats targeting hardware and firmware components within their IT infrastructure, which traditional security measures often overlook. This leaves a critical gap in security programs, making systems vulnerable to low-level attacks, implants, and supply chain compromises.
Solution
Eclypsium provides a supply chain security platform that delivers continuous monitoring and protection for hardware, firmware, and software components. The platform offers visibility into IT assets, enabling organizations to verify device integrity, discover vulnerabilities, and detect threats that evade traditional endpoint detection and response (EDR) solutions. By scanning components at a low level, the platform helps harden environments, speed up incident response, and meet compliance requirements for firmware integrity and cybersecurity supply chain risk management (C-SCRM).
Target Audience
The primary target audience includes enterprise security teams, CISOs, and IT professionals responsible for managing risk and compliance across their organization's IT infrastructure, as well as those in regulated industries such as finance, healthcare, and government.
Features
- Continuous monitoring of hardware, firmware, and software components for vulnerabilities and threats
- Automated inventory of IT infrastructure assets at the component level
- Vulnerability management for firmware and hardware components
- Threat detection capabilities to identify rootkits, bootkits, implants, and backdoors
- Integration with SIEM and ITSM systems for enriched component-level data
- Compliance reporting for firmware integrity and cybersecurity supply chain risk management
- Device integrity verification to ensure authenticity and prevent tampering
- Firmware SBOM (Software Bill of Materials) discovery and monitoring
- Automated screening of updates and patches before application
- Global Reputation Database leveraging multiple data types to verify reputability, reliability, and security