About Eclypsium
Eclypsium sells a platform that provides continuous assurance of mission-critical infrastructure throughout its lifecycle. The Eclypsium platform supports enterprise systems and devices from all major hardware manufacturers. The Eclypsium platform identifies vulnerable or out-of-compliance devices, including misconfigured, counterfeit and end-of-life/support devices. The Eclypsium platform continuously verifies the integrity of a device fleet and detects compromised or rogue devices. Eclypsium verifies the SBOM and HBOM of each device entering a fleet. Eclypsium verifies the integrity and authenticity of every device and component to establish trust in hardware infrastructure.[1][3][4]
Eclypsium states that cyber attacker tactics have shifted toward endpoint firmware and network edge devices, where traditional EDR and vulnerability management cannot see. Eclypsium describes enterprise IT assets, from user workstations to firewalls, VPNs, routers and load balancers, as introducing unknown risk into a system. Eclypsium states that each component is handled by many programmers, factories, systems integrators, shippers and other organizations before it reaches the buyer.[4][5]
Eclypsium detects indicators of compromise in hardware, firmware and software. The Eclypsium platform continuously monitors and manages a wide array of network and endpoint devices, firmwares and components. Eclypsium has a database of over 12 million known good firmware hashes. Eclypsium verifies integrity and detects unexpected modifications that indicate tampering or a compromised supply chain. Eclypsium generates an SBOM for each component and system code within enterprise devices. Eclypsium lets organizations discover and monitor firmware components and compare them with what the vendor says should be there. Eclypsium establishes baselines to detect unauthorized changes and unknown threats. Eclypsium lets organizations remediate vulnerabilities directly through the Eclypsium console or via API. Eclypsium automates response actions with configurable alerts, REST APIs and SIEM/SOAR integration.[4][6]
Eclypsium enables supply chain verification and continuous monitoring of devices across the entire device lifecycle, from procurement to active operations, to asset disposition or upcycling. Eclypsium audits prospective devices to inventory and verify the hardware inside and identify security issues. Eclypsium authenticates suppliers and sub-suppliers, ensuring authenticity, security and compliance. Eclypsium helps identify known threats such as implants, backdoors and malware in code. Eclypsium automatically screens every update before it is applied. Eclypsium addresses sensitive data leaking when servers and devices are resold or recycled. Eclypsium inventories devices and hardware supply chain risk.[5]
Eclypsium offers a cloud-based device security solution for remote devices, intended to ensure they are in a secure state and have not been compromised. Eclypsium checks corporate and BYOD devices used remotely for vulnerabilities and misconfigurations that can put the device at risk. When problems are found, Eclypsium can remotely patch or update devices to get them back into a safe state. Eclypsium can validate that new devices shipped directly to remote workers are safe and were not compromised in the supply chain. Eclypsium integrates with VPNs to verify device integrity before allowing remote access into the enterprise. Eclypsium offers deployment options including a cloud-based service and on-premises installations. Eclypsium offers a REST API for integrations with fleet deployment, intelligence feeds, system access, authentication and security operations tooling.[6][7]
Eclypsium states that supply chain security, firmware security and device integrity have become priorities across a wide range of industry standards and regulations. Eclypsium states that automated scans can verify the integrity of all critical code and components within a wide range of asset types. Eclypsium scans can validate the authenticity of newly acquired assets and verify that they meet specifications defined by vendor software bill of materials. Global banks, satellite communications providers and AI data centers use Eclypsium to secure their digital supply chains. Eclypsium partners include OEMs/ODMs, ISVs, consultants, service providers and VARs. Eclypsium offers its partners training, support in standing up a business, incentives to grow, and rewards for opportunities they bring.[1][2][4][9]
Eclypsium on the record