RSA 2026
Finite State is heading to RSA Conference in San Francisco, March 24–26. Meet with our team to see how connected device organizations unify firmware and source intelligence, prioritize real exposure with reachability, and continuously produce audit-ready security and compliance proof.
🔐 Join Finite State at RSA
Onsite Meetings + Live Platform Walkthroughs
RSA Conference brings together security leaders across product security, AppSec, compliance, risk, and executive leadership.
As connected devices, embedded systems, and software-defined products expand the attack surface beyond traditional IT, security teams are under pressure to reduce vulnerability noise, scale governance, and produce defensible proof of security and compliance.
At Finite State, we help connected device teams secure every release, prioritize real exposure, and continuously produce audit-ready proof grounded in shipped software.
If you are responsible for product security, PSIRT, compliance, or portfolio risk across connected products, let’s connect in San Francisco.
🔎 What We’re Demoing at RSA
Stop by for live, artifact-backed workflows, not just dashboards.
- Firmware-grounded inventory
Unify firmware, binaries, source, and supplier SBOMs into a single system of record that reflects what actually ships. - Exploitability-based prioritization
Use reachability and exploit context to cut vulnerability noise and focus remediation on what is reachable, exploitable, and relevant. - New CVE → impacted products
Instant impact analysis across builds and variants, with consistent, defensible VEX decisions. - Design-to-build traceability
Maintain living threat models, risks, and requirements that stay aligned as software evolves. - Continuous compliance evidence
Generate clause-to-evidence traceability, verification status, SBOM and VEX exports, and audit-ready reports without rebuilding documentation every release.
🎮 IoT PenTest Blitz
Can you spot real exposure in connected devices?
IoT PenTest Blitz is a fast, hands-on prioritization challenge built around real firmware scenarios. Review vulnerabilities, apply reachability and exploit context, and decide what actually matters.
This is not a generic CTF. It is exploitability-based decision-making grounded in shipped software.
Stop by anytime during our sessions in App Sec Village to play and see how connected device teams cut noise and produce defensible security outcomes.
Session 1:
Wednesday March 25th 9:30AM-12:00PM
Session 2:
Wednesday March 25th 12:00PM-2:30PM
Session 3:
Thursday March 26th 12:00PM-2:00PM
📅 Let’s Connect in San Francisco
Whether you lead Product Security, PSIRT, Compliance, or Executive Security strategy, we will tailor the conversation to your priorities.
Meet with Finite State at RSA and see how connected device teams reduce noise, accelerate response, and continuously produce defensible security and compliance outcomes.
Schedule time with our team during RSA, March 24–26.