A trusted vendor can still ship an untrustworthy file. ReversingLabs takes finished software apart, giving buyers and builders a way to inspect the bargain before they run it.
Benny Czarny bootstrapped OPSWAT for 19 years on a simple, paranoid idea: assume every file is malicious. Today that assumption guards 98% of US nuclear plants.