Generative AI is changing the threat landscape with faster malware development, deepfakes, and highly convincing phishing. Combined with stricter supp...

Discover how AI is reshaping SBOMs and software security, driving smarter triage, deeper reachability analysis, and helping navigate rising regulatory...

Discover how AI agents are reshaping human roles—and why it’s time to rethink your place as the orchestrator of intelligent systems.

Learn strategies to make your LLM outputs as reliable as your human experts.

Discover how Finite State uses AI to tackle the toughest part of compliance, so security teams can stay focused on protecting products and meeting glo...

Discover why AI can’t “one-shot” your entire codebase and how better prompts, tools, and human guidance unlock its real power in finding security flaw...

Discover how AI is becoming essential for managing exploding regulatory demands in product security, helping teams bridge the gap between scarce human...

Explore how organizations can safely adopt AI for product security—even in critical infrastructure—by balancing cloud trust, data governance, and emer...

Explore why simply dropping binaries into AI won’t find all your vulnerabilities, and how Finite State uses AI to tackle the massive work that happens...

Learn how LLMs are revolutionizing vulnerability triage and remediation guidance, cutting manual effort by 90% and allowing security teams to focus on...

See how generative AI replaces manual threat intel review, turning mountains of human-written reports into actionable signatures for faster, smarter v...

See how Finite State harnesses AI to cut vulnerability triage workloads by up to 90% and automate tedious compliance documentation—freeing security te...

Find out why AI risk assessments are only as good as the context you provide and how giving LLMs deeper product and threat insights drives smarter, sa...

See how giving AI tools supercharges its capabilities and why this evolution is poised to revolutionize cybersecurity and software supply chain securi...

Learn why SBOMs are far more complex than a nutrition label and how Finite State is using AI to transform SBOM analysis, triage, and remediation into ...

Learn how combining graph analysis with AI can pinpoint which vulnerabilities are truly exploitable so you can focus remediation efforts where they ma...

Discover why LLMs can’t simply “read binaries” to find vulnerabilities and how combining them with specialized tools unlocks real value in software se...

Unpack the real strengths—and limits—of LLMs in security, and learn how combining them with purpose-built tools unlocks powerful insights for finding ...

Bottom-up vulnerability tracking works for small teams—but breaks at scale. Learn how fragmentation impacts prioritization, compliance, and security r...

Siloed teams and one-off tools create outdated compliance. Learn why connected device security needs a continuous, cross-functional workflow.

Controls assessments and gap analyses aren’t enough. Learn why compliance must connect security controls to real firmware, releases, and shipped softw...

Regulations like the EU CRA demand proof—but real risk lives in releases, firmware, and code. Learn how to connect vulnerabilities to continuous compl...

Dario Lobozzo from Finite State presents a comprehensive approach to CRA (Cyber Resilience Act) compliance, addressing the challenges organizations fa...

Automotive, medical device, and telecom manufacturers face strict regulatory demands—and high stakes. In this video, Mike Hatherall, Lead Solutions Ar...

The EU CRA introduces sweeping new responsibilities for connected product manufacturers—but most aren’t ready. In this clip, Dario Lobozzo, GM of EMEA...

CRA compliance isn’t one-size-fits-all—especially for manufacturers of software-defined products. In this clip, Dario Lobozzo, GM of EMEA at Finite St...

Dario Lobozzo, GM of EMEA at Finite State, describes the “holy grail” of CRA compliance: automated, scalable vulnerability reporting. In this clip, he...

Vulnerability disclosure is nothing new—but CRA introduces a new twist: retroactive reporting. In this clip, Dario Lobozzo, GM of EMEA at Finite State...

In this clip, Dario Lobozzo, GM of EMEA at Finite State, lays out the true value of SBOMs in modern product security—enabling visibility, context, and...

What happens when you have a legacy product—already in the field, five years on the market—and now you have to certify it for CRA? Learn how layering ...

CRA is the baseline—but many forward-looking manufacturers aren’t stopping there. In this clip, Dario Lobozzo, GM of EMEA at Finite State, explains wh...

General Manager of EMEA Dario Lobozzo outlines a low-effort, high-impact strategy for getting started with CRA compliance. From rapid product risk ide...

Dario Lobozzo, GM of EMEA at Finite State, shares what it really takes to run a successful CRA vulnerability disclosure program: communication across ...

Unpack the complexity of meeting CRA’s Coordinated Vulnerability Disclosure (CVD) requirements, including why CVD success requires deep visibility int...

Dario Lobozzo, GM of EMEA at Finite State, calls out a common but costly mistake in CRA compliance planning: treating assessments and remediation as s...

Treating CRA compliance as a one-time, checkbox exercise is a recipe for failure. While you may get through your first audit with spreadsheets and man...

Pen testing may not be named in every regulation, but it’s essential to prove your security controls work.

Many OEMs, suppliers, and aftermarket companies may be affected by the CVR - here’s what you need to do now.

Understand how to secure a specific authorization under the CVR—and what cybersecurity evidence you’ll need—to increase your chances of acceptance.

Experts weigh in on how enforcement of the CVR might unfold—and why early flexibility could be on the table.

The Connected Vehicle Rule demands component-level scrutiny, especially with multi-region suppliers and JV structures.

Learn what it takes to remain compliant with the CVR, including codebase transfers and strict developer restrictions.

Learn how the final Connected Vehicle Rule narrows firmware definitions and creates a software carve-out that requires careful planning.

Understand how to determine what hardware and software falls under VCS and ADS requirements for the Connected Vehicle Rule.

Understand the blurry line companies must navigate to assess China or Russia-linked entities.

Experts explain why this regulation is unlike anything the automotive industry has faced before.

Learn what it really takes to identify, document, and verify component origins across your supply chain to comply with the Connected Vehicle Rule.

A foundational overview of the rule’s scope, prohibitions, enforcement timeline, and supply chain impact.

Today’s regulatory expectations go far beyond shipping secure code. Discover what OEMs and suppliers must do to demonstrate ongoing security maturity.

Global regulations aren’t just about fines—they impact market access. Learn why compliance is now a business-critical priority for IoT manufacturers.

Discover how Finite State uses AI to tackle the toughest part of compliance, so security teams can stay focused on protecting products and meeting glo...

See how the CRA pushes manufacturers to unify SBOMs, risk assessments, and vulnerability reporting in this soundbite from our Risk to Resilience webin...

Explore how companies meet security regulations through patching, vendor collaboration, or creative compensating controls when direct fixes aren’t fea...

Discover why getting security right the first time is essential for medical device approvals and how gaps in your submission can derail time-to-market...

Tool sprawl, manual processes, and disconnected workflows are slowing down security and compliance teams across the software lifecycle. In this video,...

Finite State is more than a scanner—it’s a unifying force across engineering, security, and compliance. In this video, Mike Hatherall, Lead Solutions ...

Discover how combining EPSS with Finite State’s built-in reachability analysis takes you from “probable” to “provable” with smarter prioritization, fe...

Learn how Finite State’s platform accelerates analysis, powers precise threat modeling, and gives pen testers deep insight in minutes—not days.

Default passwords and forgotten comments often remain buried in code—posing major risks for connected devices. Learn how Finite State helps uncover th...

Discover how Finite State reveals what’s truly inside embedded systems and helps you prioritize the few vulnerabilities that matter most, so you can m...

Learn why legacy SCA tools focus on licensing while Finite State zeroes in on security, giving you real protection instead of just compliance checkbox...

See how Finite State empowers you to customize security policies, automate enforcement, and align vulnerability management with your unique risk toler...

Learn how Finite State digs into all code—yours and your suppliers’—using advanced unpacking to deliver deep security insights and accurate SBOMs.

See how Finite State uses precise binary fingerprints and real-time threat intel to pinpoint real issues and highlight what truly matters.

Learn how Finite State blends precise signature matching with probabilistic analysis to identify hidden components in binaries, even when package data...

Learn how Finite State’s CLI and APIs keep your pipelines fast and secure, so you can automate scans without slowing product delivery.

Discover how Finite State accelerates remediation by cutting false positives and helping teams zero in on real, high-priority security issues first.

See how Finite State helps you know what’s in your system, decide what to fix, and confidently share SBOMs with partners and regulators.

In this rapid-fire Q&A, Mike Hatherall, Lead Solutions Architect at Finite State, tackles some of the most common challenges product security teams fa...

Mike Hatherall shares advice for security leaders building modern, scalable product security: start with a data model, align terms, and automate visib...

Global regulations—from the EU CRA to the FDA’s cybersecurity mandate—are transforming product security workflows. In this video, Mike Hatherall, Lead...

In this video, Mike Hatherall, Lead Solutions Architect at Finite State, explains the power of unifying these elements in a single platform. When ever...

In this video, Mike Hatherall, Lead Solutions Architect at Finite State, explains how a unified platform can deliver shared data in tailored ways—so e...

What would it take to align engineering, security, and legal teams around a single understanding of product risk? In this video, Mike Hatherall, Lead ...

When engineering, security, and compliance teams use different tools—and each relies on their own “source of truth”—vulnerability management falls apa...

Mike Hatherall, Lead Solutions Architect at Finite State, has worked with product security teams across Europe and around the world. In this video, he...

Watch this On-Demand Health-ISAC panel discussion to understand how industry leaders are addressing the emerging challenge of protecting IoT devices.

Discover how Finite State uses AI to tackle the toughest part of compliance, so security teams can stay focused on protecting products and meeting glo...

Explore how companies meet security regulations through patching, vendor collaboration, or creative compensating controls when direct fixes aren’t fea...

In this rapid-fire Q&A, Mike Hatherall, Lead Solutions Architect at Finite State, tackles some of the most common challenges product security teams fa...

Finite State is more than a scanner—it’s a unifying force across engineering, security, and compliance. In this video, Mike Hatherall, Lead Solutions ...

When engineering, security, and compliance teams use different tools—and each relies on their own “source of truth”—vulnerability management falls apa...

SBOM quality isn’t a fixed standard—it depends on who's requesting it and how it's being used. In this clip, Dario Lobozzo, GM of EMEA at Finite State...

As CRA and industry standards like UN R155 and ISO/SAE 21434 push supply chain security to the forefront, validating third-party SBOMs is no longer op...

Learn how SBOMs enable core compliance capabilities like inventory, risk assessment, and ongoing vulnerability monitoring—without being named explicit...

Explore why verifying SBOMs against final software builds is crucial for quality and trust and how emerging standards will strengthen supply chain tra...

Learn how missing dependency details signal an incomplete SBOM and why digging deeper is crucial for true software supply chain security.

Despite real progress, the rapid growth of devices and threats is outpacing the industry’s ability to secure them. In this clip, Robert Kelley reflect...

Stop assuming your device won’t be compromised & start planning for what happens when it is. Learn why defense in depth, credential revocation & real ...

With new mandates like the EU RED and Cyber Resilience Act raising the bar, manufacturers must purpose-build devices with security in mind from day on...

Security checklists might offer structure but rigid 1-size-fits-all approaches fall short. Cybersecurity must be context-driven not just compliance-dr...

Securing the device-to-cloud channel is vital to the trust model of connected systems. From rollback attacks and weak TLS to hardcoded tokens and deni...

In the push to be first, security often gets sidelined—leaving critical vulnerabilities behind.

From development to deployment, critical security oversights still plague the IoT ecosystem. Hear why retrofitting security after launch is costly—and...

Embedded devices operate under intense resource constraints—leaving little room for robust cybersecurity protections. In this clip, Robert Kelley unpa...

Robert Kelley explains how inconsistent update practices and missing lifecycle guarantees leave IoT devices exposed—even as security matures.

Driving security across product teams starts with shared language, a customer-centric mission, and a partnership mindset—not policing.

Perfect isn’t the goal—progress is. Discover why incremental improvements are key to maturing your product security posture and achieving compliance.

Proactively managing aging components can drastically reduce downstream risk and remediation effort. Here’s why it matters—and how to operationalize i...

Explore practical best practices for secure releases, artifact distribution, and post-market operations aligned with global IoT security standards.

From planning and vendor assessments to secure builds and SBOM creation, see how to embed compliance into every phase of your product development life...

Discover why modern incident response demands end-to-end visibility, scanning code, binaries, and firmware, to secure what’s often hidden in plain sig...

Hear Roland's practical advice for product security leaders on modernizing supply chain security.

Learn how moving security earlier in development, integrating automation, and engaging more teams helps organizations transition from reactive complia...

Learn why blaming upstream components isn’t enough and why owning security for all your product’s parts is critical to protect customers and your bran...

Discover why relying on vendor binaries leaves you blind and how binary analysis reveals what’s really inside to secure your products.

Explore how complex layers of open and closed source components create hidden supply chain risks and why visibility into every vendor’s dependencies m...

Learn why breaches are inevitable—and how regular risk assessments and layered defenses are key to building zero trust security for IoT systems.

In this rapid-fire Q&A, Mike Hatherall, Lead Solutions Architect at Finite State, tackles some of the most common challenges product security teams fa...

What would it take to align engineering, security, and legal teams around a single understanding of product risk? In this video, Mike Hatherall, Lead ...

When engineering, security, and compliance teams use different tools—and each relies on their own “source of truth”—vulnerability management falls apa...

When engineering, security, and compliance teams don’t share a single source of truth, product security suffers. In this video, Mike Hatherall, Lead S...

IoT devices often fail not from rare exploits but from trusting the wrong code, inputs, or components. Learn why securing your own code isn’t enough &...

Real security means understanding the entire ecosystem—firmware, cloud APIs, mobile apps, local interfaces, and everything in between. Learn why you’r...

With regulations across industries like automotive & medical, regular pen testing, discover why ethical hackers are your best defense against real one...

Not all vulnerabilities are created equal. See how KEVs, weaponized exploits, and reachability analysis can help you prioritize real-world risk.