OP[4] Launches Advanced Platform for Automated Product Security
New Version Enhances Cyber Risk Management Throughout the Entire Product Lifecycle
CHANTILLY, Va., Jan. 10, 2024 (GLOBE NEWSWIRE) — OP[4], a pioneer in the development of automated firmware security technologies for smart devices and industrial systems, announced today the launch of an advanced version of its groundbreaking product security platform. The new platform, which has been developed for and used by the U.S. government for the past 6 years, has now been expanded to help Original Equipment Manufacturers (OEMs) and Integrators build systems that are secure-by-default and help them comprehensively manage and mitigate cyber risk of those systems throughout the entire product lifecycle.
“Historically, product security teams have only had the resources to perform limited, manual security assessments prior to a product release,” noted OP[4] CEO Irby Thompson. “Unfortunately a system’s security posture naturally degrades over time, and thus proactive cybersecurity vigilance is required. The OP[4] Product Security Platform now enables OEMs and Integrators to perform automated and continuous security evaluations – providing real-time vulnerability insights, secure-by-design guidance, and cyber risk mitigations.”
The platform, powered by OP[4]’s automated program analysis engine, originally developed under DARPA, continuously analyzes device firmware and detects N-day and 0-day vulnerabilities in compiled binary code in real time (without requiring source code). The system produces a Software Bill of Materials that exposes the ground truth about the code that’s actually deployed within devices, and leverages that SBOM to detect and mitigate inherited dependency risks within the software supply chain. Identified defects and CVEs are verified to be exploitable via device emulation in order to provide informed CVSS risk scoring. This enables prioritized remediation of the highest risk vulnerabilities first.
Throughout the product design, development, and testing process, the platform provides technical implementation guidance and compliance checks that help engineering teams ensure their products are secure by default and conform to industry standards and government regulations. By scrutinizing CI/CD artifacts, identifying vulnerabilities, and automatically suggesting remediation tactics, the platform proactively and fundamentally improves code quality – accelerating market entry and ultimately reducing future risk of expensive in-field vulnerability repairs or product recalls.
Proactive security risk management continues after product release through automated “red-team” penetration testing – continuously simulating real-world cyber attacks in a digital twin environment and alerting manufacturers to any new or emerging issues. Further, it helps product teams track security evolution build by build, and enables quality improvement visualization over time in fast-paced development cycles. The platform’s interactive monitoring dashboard centralizes and synthesizes product risk data, correlating, tracking, and remediating security issues in order to streamline the Incident Response process.
“OEMs and Integrators that utilize OP[4] technology can significantly enhance the security posture of their products,” Thompson underscored. “This protects them not only against existing but also emerging cybersecurity threats.”
About OP[4]:
Founded in 2022 and headquartered in Chantilly, VA, OP[4] is a trailblazer in automated firmware security. Utilizing technology created through DARPA and productized via AFWERX for U.S. national defense, OP[4]‘s automated platform simulates a running device to distinguish between active and inactive code, analyzing risk at the binary code level, and filtering out noise to detect, validate, prioritize, and remediate exploitable N-Day and 0-Day vulnerabilities. Join the firmware security revolution at https://op4.io
Media Contact:
Meredith Schweitzer
The Riotmind Agency
meredith2@theriotmind.agency
1 [347] 698-9196
