Blog Resources

Resources

Blog

Explore expert insights, industry trends, and actionable advice on product cybersecurity and compliance.

Featured blog posts

ONEKEY EN 40000: What Manufacturers Must Prove Under the CRA

Blog

Oct 22, 2026

min read

ONEKEY EN 40000: What Manufacturers Must Prove Under the CRA

EN 40000 turns CRA requirements into concrete duties. See what Part 1-3 asks manufacturers to document and how to prove it. Read more.

ONEKEY AI Agent: Get to Firmware Security Answers Faster

Explore how ONEKEY AI Agent simplifies firmware security with AI-assisted vulnerability investigation, SBOM exploration, OQL queries, and product guidance.

Stop Digging Through Tabs: Meet the ONEKEY AI Agent

Discover how the ONEKEY AI Agent uses a multi-agent architecture and platform data to help security teams analyze firmware, CVEs, and findings faster.

How should manufacturers prepare for CRA vulnerability and incident reporting through the ENISA Single Reporting Platform, and can it currently be automated?

Learn how manufacturers can prepare for CRA vulnerability and incident reporting via the ENISA Single Reporting Platform and what can be automated.

Blog

Sep 1, 2026

min read

Red Teaming vs Pentesting

Red teaming and pentesting solve different problems. Compare scope, cost, and outcomes, then get a testing plan built for your systems today.

LLMs CVEs Prioritization

CVE prioritization with LLMs: what the research shows about where AI triage works, where it breaks, and what it means for firmware. Book a demo.

AI Hallucinations Vulnerability Management

AI hallucinations can turn a false finding into a wasted investigation. See how SBOM and VEX build trustworthy vulnerability data. Book a demo.

Post Quantum Cryptography Cconnected Devices

Post-quantum cryptography is coming to every connected device. Learn the risks, NIST standards and how to build crypto-agile firmware. Book a demo.

Automated Binary Firmware Analysis

Automated binary firmware analysis with AI: how it works, where LLMs help, and why source-less scanning matters for connected devices. Book a demo.

Vulnerability Remediation: Process, Tools & Best Practices

Vulnerability remediation for firmware & embedded products: prioritize CVEs with VEX, patch without source code & prove CRA compliance. Book a demo.

Beyond the Hype: LLMs, Mythos, and the Future of Firmware Analysis

Discover how LLMs like Claude Mythos are reshaping firmware security, accelerating vulnerability discovery, and why deterministic platforms like ONEKEY remain essential for scalable, reliable firmware analysis.

Vulnerability Management Framework: How to Meet CRA & NIS2 Requirements Efficiently

All 6 NIST vulnerability management components explained – and how a vulnerability management tool accelerates implementation. Read the guide now!

Software Composition Analysis (SCA): Definition, Function, and Tips

Software Composition Analysis protects your software supply chain. Learn how SCA, SBOM, and CRA are related – and what ONEKEY can do. Read the guide.

Vulnerability Management Life Cycle: Steps And Workflows

Vulnerability management life cycle: A guide to core phases, best practices, and challenges for ensuring compliance.

NIS-2 Compliance With SBOMs: A Secure Supply Chain Strategy

Learn how SBOM practices support NIS-2 compliance by improving software supply chain visibility, vulnerability response, and audit-ready evidence.

Firmware Security Reports: Essential Components And Strategic Value

Beyond the SBOM: how firmware security reports identify vulnerabilities and provide audit-ready evidence for PSIRT and product compliance teams.

SBOM Report: Essential Components And Why It Matters

An SBOM report provides visibility into software components and risks. This guide covers essential requirements for security and regulatory compliance.

RTOS Cyber Security and Compliance in Embedded Systems

RTOS-based products introduce long-term security and compliance risks. This guide outlines governance, vulnerability management, and regulatory strategies.

SBOM and VEX Workflows for Scalable Vulnerability Management

SBOMs provide transparency, while VEX enables risk-based prioritisation. Learn how to integrate both into compliance workflows.

Software Supply Chain Security Best Practices: A Strategic Guide for Product Leaders

The CRA is coming. Learn best practices for securing the software supply chain, from SBOMs to binary analysis. Read now!

Threat Modeling in the SDLC: A Strategic Guide for Product Security

Integrate threat modeling efficiently into all phases of the SDLC. Avoid costly design errors and meet CRA requirements. Learn more!

SBOM For Firmware and Embedded Software in DevSecOps

Learn about the challenges firmware SBOMs pose in DevSecOps and how teams are pragmatically solving them.

What Is a Software Bill of Materials (SBOM)? Meaning, Example & Use Cases

Discover the meaning of a Software Bill of Materials (SBOM), see real examples, and learn how SBOMs strengthen software security and compliance today.

What Is a Security Vulnerability? Definition & Examples

Find out what a security vulnerability is, see common examples of vulnerabilities in security, and learn how to manage risks effectively. Read more!

No market approval without cybersecurity: How companies can successfully implement the CRA

The EU Cyber Resilience Act (CRA) makes cybersecurity a must for CE marking. Learn how companies can achieve compliance, ensure security, and secure market access.

Static Source Code Analysis vs. Binary Scanning

Compare static source code analysis and binary scanning. Learn how ONEKEY gives you full visibility, detects real risks, and generates SBOMs – even without source code.

Sebastian Schneider

Customer Success Engineer

Blog

May 23, 2025

min read

ONEKEY Platform Update May 2025

Explore ONEKEY’s latest platform enhancements, including advanced RTOS firmware analysis, ELF dependency visualization and many more

Reducing Common Vulnerabilities and Exposures (CVEs) in Software Development

Stay informed & stay protected with our blog on the EU Cyber Resilience Act. Learn what the new regulation means for your business & how to stay compliant.

Sara Fortmann

Senior Marketing Manager

SBOM Delivery: Methods, Requirements & Setup

Blog

Jan 8, 2023

min read

SBOM Delivery: Methods, Requirements & Setup

Learn how to deliver an SBOM: compare delivery methods, meet CRA, NIS2 and FDA requirements, and automate distribution with ONEKEY. Book a demo.

Tanja Sommer

All Blog Posts

Blog

Oct 22, 2026

min read

ONEKEY EN 40000: What Manufacturers Must Prove Under the CRA

EN 40000 turns CRA requirements into concrete duties. See what Part 1-3 asks manufacturers to document and how to prove it. Read more.

Blog

Oct 14, 2026

min read

ONEKEY AI Agent: Get to Firmware Security Answers Faster

Explore how ONEKEY AI Agent simplifies firmware security with AI-assisted vulnerability investigation, SBOM exploration, OQL queries, and product guidance.

Blog

Oct 1, 2026

min read

ONEKEY Secure SDLC for Embedded Devices

Secure SDLC builds security into every release instead of testing it in at the end. See how each phase works for firmware teams. Book a demo.

Blog

Sep 22, 2026

min read

Stop Digging Through Tabs: Meet the ONEKEY AI Agent

Discover how the ONEKEY AI Agent uses a multi-agent architecture and platform data to help security teams analyze firmware, CVEs, and findings faster.

Blog

Sep 15, 2026

min read

How should manufacturers prepare for CRA vulnerability and incident reporting through the ENISA Single Reporting Platform, and can it currently be automated?

Learn how manufacturers can prepare for CRA vulnerability and incident reporting via the ENISA Single Reporting Platform and what can be automated.

Blog

Sep 1, 2026

min read

Red Teaming vs Pentesting

Red teaming and pentesting solve different problems. Compare scope, cost, and outcomes, then get a testing plan built for your systems today.

Blog

Aug 17, 2026

min read

LLMs CVEs Prioritization

CVE prioritization with LLMs: what the research shows about where AI triage works, where it breaks, and what it means for firmware. Book a demo.

Blog

Aug 3, 2026

min read

AI Hallucinations Vulnerability Management

AI hallucinations can turn a false finding into a wasted investigation. See how SBOM and VEX build trustworthy vulnerability data. Book a demo.

Blog

Jul 1, 2026

min read

Post Quantum Cryptography Cconnected Devices

Post-quantum cryptography is coming to every connected device. Learn the risks, NIST standards and how to build crypto-agile firmware. Book a demo.

check out white papers

Explore in-depth whitepapers on cybersecurity and compliance, designed to strengthen your product’s security and compliance.

Meet Us at Events

Join us at industry-leading events and connect with our experts in person to learn how to enhance your cybersecurity and compliance strategies.

latest security insights

Explore in-depth research on firmware analysis, threat detection, and product security, powered by the ONEKEY platform.

Make cybersecurity and compliance efficient and effective with ONEKEY.

See it in Action

ONEKEY EN 40000: What Manufacturers Must Prove Under the CRA

ONEKEY AI Agent: Get to Firmware Security Answers Faster

Stop Digging Through Tabs: Meet the ONEKEY AI Agent

How should manufacturers prepare for CRA vulnerability and incident reporting through the ENISA Single Reporting Platform, and can it currently be automated?

Red Teaming vs Pentesting

LLMs CVEs Prioritization

AI Hallucinations Vulnerability Management

Post Quantum Cryptography Cconnected Devices

Automated Binary Firmware Analysis

Vulnerability Remediation: Process, Tools & Best Practices

Beyond the Hype: LLMs, Mythos, and the Future of Firmware Analysis

Vulnerability Management Framework: How to Meet CRA & NIS2 Requirements Efficiently

Software Composition Analysis (SCA): Definition, Function, and Tips

Vulnerability Management Life Cycle: Steps And Workflows

NIS-2 Compliance With SBOMs: A Secure Supply Chain Strategy

Firmware Security Reports: Essential Components And Strategic Value

SBOM Report: Essential Components And Why It Matters

RTOS Cyber Security and Compliance in Embedded Systems

SBOM and VEX Workflows for Scalable Vulnerability Management

Software Supply Chain Security Best Practices: A Strategic Guide for Product Leaders

Threat Modeling in the SDLC: A Strategic Guide for Product Security

SBOM For Firmware and Embedded Software in DevSecOps

What Is a Software Bill of Materials (SBOM)? Meaning, Example & Use Cases

What Is a Security Vulnerability? Definition & Examples

No market approval without cybersecurity: How companies can successfully implement the CRA

Static Source Code Analysis vs. Binary Scanning

ONEKEY Platform Update May 2025

Reducing Common Vulnerabilities and Exposures (CVEs) in Software Development

SBOM Delivery: Methods, Requirements & Setup

ONEKEY EN 40000: What Manufacturers Must Prove Under the CRA

ONEKEY AI Agent: Get to Firmware Security Answers Faster

ONEKEY Secure SDLC for Embedded Devices

Stop Digging Through Tabs: Meet the ONEKEY AI Agent

How should manufacturers prepare for CRA vulnerability and incident reporting through the ENISA Single Reporting Platform, and can it currently be automated?

Red Teaming vs Pentesting

LLMs CVEs Prioritization

AI Hallucinations Vulnerability Management

Post Quantum Cryptography Cconnected Devices

check out white papers

Meet Us at Events

latest security insights

Ready to automate your Product Cybersecurity & Compliance?