Binarly Unveils Transparency Platform 2.5 with Advanced Reachability Analysis

Binarly, provider of the industry leading AI-powered firmware and software supply chain security platform, today announced the release of Binarly Transparency Platform 2.5 with several groundbreaking features designed to enhance software vulnerability management and improve security posture across enterprise environments.

The key highlight of this release is the innovative Reachability Analysis, a feature that identifies and prioritizes vulnerabilities based on their exploitability within the system’s execution flow, allowing for more targeted and effective remediation.

With the introduction of Reachability Analysis, Binarly’s Transparency Platform 2.5 provides a truly innovative method to evaluate risk by analyzing the potential reach and impact of exploitable code paths. This feature allows security teams to prioritize remediation efforts by focusing on vulnerabilities that are not only present but also reachable within the system’s execution flow.

The patent-pending Reachability Analysis technology enables a deeper understanding of program analysis and helps prioritize security risks across software and firmware assets. By focusing on reachability -- whether a vulnerability can be exploited in a specific context -- the new platform reduces false positives and improves the efficiency of remediation efforts.

“Traditional vulnerability management tools focus on identifying flaws without considering their context or exploitability,” said Alex Matrosov, founder and CEO of Binarly. “Our new Reachability Analysis feature changes the game by providing a deeper understanding of which vulnerabilities pose the most significant risk, driving more effective and targeted mitigation strategies.”

Building on the powerful capabilities of the Binary Risk Intelligence Core introduced earlier this year, Binarly Transparency Platform 2.5 introduces several enhancements designed to provide comprehensive visibility and control over firmware security:

Custom Semantic Detection Rules: Allows product security teams to create rules for detecting vulnerabilities discovered internally, even before they are assigned a CVE, enabling proactive hunting for broader security risks.
Advanced Cryptographic Capabilities: Enhances the discovery and detection of cryptographic assets and algorithms, supporting the creation of a comprehensive Cryptographic Bill of Materials (CBOM) essential for post-quantum migration and compliance with new NIST guidelines.
Weak Binaries and Mitigation Checks: The updated platform adds more robust checks for hardening code, executable files, and the Linux kernel, focusing on identifying the use of unsafe C/C++ functions that could lead to Secure Development Lifecycle (SDLC) policy violations.
Docker Container Risk Detection: Enhances detection capabilities within Docker environments, including a new Secrets discovery feature to identify exposed credentials and encryption keys, improving the security posture of containerized applications.

The new Binarly Transparency Platform 2.5 empowers organizations with the tools to proactively mitigate firmware and software security issues. By integrating Reachability Analysis and other advanced features, the platform enables enterprise defenders to avoid alert fatigue while identifying and addressing critical vulnerabilities before they can be exploited by malicious actors. Learn more at www.binarly.io

About Binarly

Binarly is a global firmware and software supply chain security company founded in 2021. The company’s flagship Binarly Transparency Platform is an enterprise-class, AI-powered solution used by device manufacturers, OEMs, IBVs and product security teams to identify known and unknown vulnerabilities, misconfigurations and signs of malicious code implantation. Binarly’s validated remediation playbooks have significantly reduced the cost and time to respond to security exposures. Based in Los Angeles, California, Binarly brings decades of research and program analysis expertise to build solutions to protect businesses, critical infrastructure, and consumers around the world.