# Binarly

> Binarly is a firmware and software supply chain security company that reads the code no one else looks at - the layer below the operating system. Its AI-powered Transparency Platform analyzes firmware binaries to surface known and unknown vulnerabilities, malicious implants, misconfigurations and cryptographic weaknesses, then builds a genuine software bill of materials by reconstructing dependencies from the binary itself rather than trusting a manifest. Founded in 2021 by veteran reverse engineers Alex Matrosov and Claudiu Teodorescu, the company has disclosed hundreds of high-impact firmware vulnerabilities, including the widely covered PKfail Secure Boot flaw.

- **Founded:** 2021
- **Headquarters:** Santa Monica, California, United States
- **Founders:** Alex Matrosov (Founder & CEO), Claudiu Teodorescu (Co-Founder)
- **Team size:** ~30 employees
- **Products:** Binarly Transparency Platform, Zero Trust SBOM / Dependency Analysis, Binary Risk Hunt, Transparency Platform v3.0 capabilities, Binarly REsearch / Vulnerability disclosures
- **Notable:** Disclosed 300+ high-impact firmware vulnerabilities via Binarly REsearch, Discovered and disclosed PKfail (CVE-2024-8105), an insecure UEFI Secure Boot Platform Key issue spanning 12+ years of shipped firmware, Uncovered critical Supermicro BMC firmware flaws including a signature verification bypass (CVE-2024-10237)

## Products & services

- **Binarly Transparency Platform** — An enterprise, AI-powered platform used by device manufacturers, OEMs, IBVs and product security teams to detect known and unknown vulnerabilities, malicious code implantation and dangerous misconfigurations in firmware and binaries. Integrates into SDLC and CI/CD pipelines.
- **Zero Trust SBOM / Dependency Analysis** — Reconstructs a software bill of materials directly from firmware binaries - building a dependency graph and identifying third-party components rather than trusting a supplied manifest or hashes.
- **Binary Risk Hunt** — A free vulnerability scanner that generates SBOMs and surfaces firmware risk, offered as an on-ramp to the full platform.
- **Transparency Platform v3.0 capabilities** — Adds real-time threat-intelligence prioritization, exploitation maturity scoring, abnormal PE parsing detection, a microcode vulnerability checker, cryptographic artifact discovery and auto-validated secret detection.
- **Binarly REsearch / Vulnerability disclosures** — A public research arm that discovers and responsibly discloses high-impact firmware vulnerabilities (e.g. PKfail, LogoFAIL-adjacent and Supermicro BMC issues) with BRLY and CVE identifiers.

## Achievements

- Disclosed 300+ high-impact firmware vulnerabilities via Binarly REsearch
- Discovered and disclosed PKfail (CVE-2024-8105), an insecure UEFI Secure Boot Platform Key issue spanning 12+ years of shipped firmware
- Uncovered critical Supermicro BMC firmware flaws including a signature verification bypass (CVE-2024-10237)
- Named a finalist at the Black Hat USA 2023 Startup Spotlight competition
- Raised $14.1M total across two seed rounds, including a $10.5M round led by Two Bear Capital in 2024
- Pioneered a Zero Trust approach to SBOMs that reconstructs dependencies from binaries

## Latest updates

- **2025-04** — Released Transparency Platform v3.0 with real-time threat-intelligence prioritization, exploitation maturity scoring, cryptographic artifact discovery and auto-validated secret detection.
- **2024-09** — Presented new PKfail findings at LABScon 2024, expanding the scope of insecure cryptographic material found in shipping firmware.
- **2024-07** — Disclosed PKfail (CVE-2024-8105), an insecure Platform Key issue affecting hundreds of device models across a 12-year span.
- **2024-04** — Launched Transparency Platform v2.0 with improved software supply chain and IoT security capabilities.
- **2024-03** — Closed a $10.5M financing round led by Two Bear Capital to accelerate R&D.

## Links

- Website: https://binarly.io
- LinkedIn: https://www.linkedin.com/company/binarlyinc
- Twitter/X: https://twitter.com/binarly_io
- GitHub: https://github.com/binarly-io

---

Profile page: https://yespress.io/binarly
Published by YesPress — https://yespress.io
Last updated: 2026-07-07