Founded Year

2021

Stage

Seed VC | Alive

Total Raised

$14.1M

Last Raised

$10.5M | 2 yrs ago

Mosaic Score
The Mosaic Score is an algorithm that measures the overall financial health and market potential of private companies.

+9 points in the past 30 days

About Binarly

Binarly specializes in firmware security and supply chain risk management within the cybersecurity industry. The company offers an AI-powered platform that detects and remediates known and unknown vulnerabilities in firmware and software supply chains. Binarly's services are designed to provide visibility into firmware and software vulnerabilities, identify malicious code, and offer prescriptive fixes for rapid resolution. It was founded in 2021 and is based in Santa Monica, California.

Headquarters Location

2450 Colorado Avenue Suite 100E

Santa Monica, California, 90404,

United States

Loading...

Loading...

Research containing Binarly

Get data-driven expert analysis from the CB Insights Intelligence Unit.

CB Insights Intelligence Analysts have mentioned Binarly in 3 CB Insights research briefs, most recently on Oct 20, 2025.

Expert Collections containing Binarly

Expert Collections are analyst-curated lists that highlight the companies you need to know in the most important technology spaces.

Binarly is included in 5 Expert Collections, including Cybersecurity.

C

Cybersecurity

11,028 items

These companies protect organizations from digital threats.

A

AI 100 (2024)

100 items

A

Artificial Intelligence (AI)

20,628 items

A

AI 100 (2025)

100 items

A

AI 100 (All Winners 2018-2025)

200 items

Binarly Patents

Binarly has filed 3 patents.

The 3 most popular patent topics include:

  • wireless networking
  • compiler construction
  • cryptography
patents chart

Application Date

Grant Date

Title

Related Topics

Status

10/2/2024

2/25/2025

Wireless networking, Memory management, Parallel computing, DEC hardware, Minicomputers

Grant

Application Date

10/2/2024

Grant Date

2/25/2025

Title

Related Topics

Wireless networking, Memory management, Parallel computing, DEC hardware, Minicomputers

Status

Grant

Latest Binarly News

Supermicro: server con vulnerabilità critiche che consentono attacchi malware non rilevabili

Sep 25, 2025

di Manolo De Agostini pubblicata il 25 Settembre 2025, alle 09:11 nel canale Security Binarly ha scoperto due vulnerabilità critiche nei firmware BMC di Supermicro, CVE-2025-7937 e CVE-2025-6198, che consentono l'installazione di immagini firmware malevole e il bypass della Root of Trust. Supermicro ha confermato i problemi e rilasciato patch per modelli selezionati. Ricercatori della società Binarly hanno individuato due nuove vulnerabilità,  classificate come CVE-2025-7937 e CVE-2025-6198, nella logica di validazione del firmware BMC (Baseboard Management Controller) impiegato su schede madri Supermicro. Una delle due aggira una patch che la società aveva già diffuso all'inizio dell'anno per correggere un'altra problematica di sicurezza. Le falle permettono di caricare immagini firmware appositamente create che, pur mantenendo digest e firma apparenti, consentono la sostituzione o la rilocazione di regioni firmate e l'esecuzione di codice non autorizzato a livello di boot. BMC è un microcontrollore presente sulle schede madri dei server Supermicro che consente il monitoraggio e la gestione remota del sistema anche quando questo è spento. "Questo problema di sicurezza potrebbe consentire a potenziali aggressori di ottenere il controllo completo e persistente sia del sistema BMC sia del sistema operativo del server principale", sostengono i ricercatori di Binarly. Il vettore di attacco descritto sfrutta due meccanismi distinti ma correlati: una manipolazione del meccanismo fwmap - la tabella presente nell'immagine firmware che definisce le regioni firmate - e una logica di validazione difettosa nell'implementazione auth_bmc_sig eseguita nell'ambiente OP-TEE su alcuni firmware (es. MBD-X13SEM-F). In pratica, un malintenzionato in grado di fornire un'immagine può ridefinire le regioni firmate e spostare dati originali in aree inattive della memoria, facendo sì che l'hash calcolato coincida con il valore firmato e superi la verifica, pur contenendo codice malevolo. L'impatto pratico è elevato: l'installazione di un firmware malevolo sulla BMC fornisce persistenza sotto il sistema operativo, controllo privilegiato sulla macchina e la possibilità di bypassare meccanismi progettati per verificare l'integrità del boot (Root of Trust). Gli autori hanno dimostrato anche come sia possibile flashare e avviare un kernel personalizzato, evidenziando che l'autenticazione del kernel durante l'avvio può risultare inefficace in scenari specifici. Supermicro ha confermato i problemi e ha pubblicato aggiornamenti di sicurezza; per alcuni modelli sono già disponibili firmware aggiornati, mentre per altri prodotti bisognerà attendere ancora del tempo. Binarly ha inoltre reso disponibili proof-of-concept per le due vulnerabilità; la pubblicazione di PoC rende urgente l'applicazione delle patch da parte degli amministratori di datacenter e delle organizzazioni che usano hardware Supermicro.

Binarly Frequently Asked Questions (FAQ)

  • When was Binarly founded?

    Binarly was founded in 2021.

  • Where is Binarly's headquarters?

    Binarly's headquarters is located at 2450 Colorado Avenue, Santa Monica.

  • What is Binarly's latest funding round?

    Binarly's latest funding round is Seed VC.

  • How much did Binarly raise?

    Binarly raised a total of $14.1M.

  • Who are the investors of Binarly?

    Investors of Binarly include WestWave Capital, Acrobator Ventures, Cisco Investments, Liquid 2 Ventures, Two Bear Capital and 15 more.

  • Who are Binarly's competitors?

    Competitors of Binarly include Chainguard, Qwiet AI, SixMap, Prewave, ReversingLabs and 7 more.

Loading...

Compare Binarly to Competitors

Aqua Security Logo
Aqua Security

Aqua Security focuses on securing containerized cloud native applications within the cybersecurity sector. The company provides a lifecycle solution that includes pre-deployment hygiene enforcement and real-time attack mitigation for cloud native applications. Aqua's clientele consists of large enterprises that require cloud security. Aqua Security was formerly known as Scalock. It was founded in 2015 and is based in Ramat Gan, Israel.

O
Oligo

Oligo focuses on runtime application security and offers solutions for scanning and monitoring, supply chain security, application vulnerability management, and attack detection and response. It was founded in 2022 and is based in Tel Aviv, Israel.

RapidFort Logo
RapidFort

RapidFort specializes in software attack surface management and operates within the cybersecurity domain. The company provides common vulnerabilities and exposures (CVE) images for secure software development, CVE remediation, and tools for vulnerability scanning, profiling, and hardening applications in both development and production environments. It's solutions aim to address compliance processes and improve software supply chain security and workload management. It was founded in 2020 and is based in Sunnyvale, California.

Veracode Logo
Veracode

Veracode provides application security solutions across sectors, including government, financial services, software, technology, retail, and healthcare. The company offers services for the software development life cycle, including vulnerability detection, static and dynamic application security testing, software composition analysis, container security, application security posture management, and penetration testing. Veracode's platform integrates into development processes, providing feedback and remediation supported by artificial intelligence to improve developer efficiency and security. It was founded in 2006 and is based in Burlington, Massachusetts.

Flashpoint Logo
Flashpoint

Flashpoint specializes in threat data and intelligence, focusing on cybersecurity and intelligence services. The company offers products including cyber threat intelligence, vulnerability intelligence, physical security intelligence, and national security intelligence, all enriched with human insights. Flashpoint serves businesses and government sectors, providing solutions that include fraud prevention, brand protection, and operational resilience against evolving threats. Flashpoint was formerly known as Flashpoint Intelligence. It was founded in 2010 and is based in Washington, DC.

Bright Security Logo
Bright Security

Bright Security specializes in dynamic application security testing (DAST) and API security within the cybersecurity industry. The company offers solutions that integrate with continuous integration and delivery (CI/CD) pipelines to identify and manage vulnerabilities in web applications and APIs, catering to the needs of developers and security teams. Bright Security's services are designed to validate business logic, provide extensive vulnerability coverage, and offer clear remediation guidelines with a focus on low false positives. It was founded in 2018 and is based in San Rafael, California.

Loading...

CBI websites generally use certain cookies to enable better interactions with our sites and services. Use of these cookies, which may be stored on your device, permits us to improve and customize your experience. You can read more about your cookie choices at our privacy policy here. By continuing to use this site you are consenting to these choices.