Product security company Finite State has successfully secured $27 million in a Series C funding round aimed at expanding its global footprint and enhancing the autonomy of its security platform for connected devices. This funding round was spearheaded by private funds managed by The O.H.I.O. Fund, with contributions from CIBC Innovation Banking, Energy Impact Partners, Energize Capital, and National Grid Partners.
Addressing Manufacturing Challenges
The newly acquired funding will enable Finite State to address two significant challenges facing manufacturers. The first challenge is the discovery of critical vulnerabilities by AI-driven research, referred to as the ‘Vulnpocalypse’, which occurred in October. The second challenge involves a growing number of security mandates that manufacturers must comply with.
Finite State’s platform is designed to analyze the code within devices, covering both software and firmware components. It operates from compiled firmware and binaries, eliminating the need for source code. This capability allows the platform to identify both recognized and new vulnerabilities, offering manufacturers solutions to address potential threats.
Ensuring Compliance and Security
On the compliance front, Finite State’s platform generates Software Bill of Materials (SBOMs), Vulnerability Exploitability eXchange (VEX) documents, and signed compliance packages. These tools assist device manufacturers in adhering to regulations such as the EU Cyber Resilience Act (CRA). The platform also supports compliance with FDA premarket cybersecurity requirements, UNECE vehicle regulations, and IEC 62443 standards.
The platform’s AI agents perform analysis, triage, and testing, drafting regulatory reports as needed. Customers have the flexibility to integrate their own agents via an API and an MCP server, ensuring seamless operations and enhanced security outcomes.
Future Outlook and Industry Impact
Finite State’s CEO, Matt Wyckhouse, emphasized the ongoing nature of the ‘Vulnpocalypse’, stating that AI-enabled attackers can identify vulnerabilities more rapidly than many manufacturers can respond. Wyckhouse highlighted the importance of regulatory advancements in safeguarding public interests, and how Finite State provides essential evidence, intelligence, and automation to secure manufacturers, organizations, and consumers.
With this significant funding boost, Finite State is poised to strengthen its market position, offering robust solutions to the evolving security challenges in the connected device landscape. As regulations tighten and threats become more sophisticated, the company’s innovative platform will play a crucial role in ensuring device security and compliance.
