Pre-Ship vs. Runtime Security, Explained

Pre-ship (build-side) security and runtime security solve different problems. Pre-ship security testing establishes what your firmware is built from and what's actually reachable before release; runtime security watches device behavior after deployment. They work best in sequence, and pre-ship comes first, because a monitor can only ever act on the software you already shipped. Build-side and runtime security solve different problems, and they work best in sequence. Here is how the build side and the runtime side divide the work, and why pre-ship comes first.