Blog Resources

Resources

Blog

Explore expert insights, industry trends, and actionable advice on product cybersecurity and compliance.

Featured blog posts

ONEKEY EN 40000: What Manufacturers Must Prove Under the CRA

Blog

Oct 22, 2026

min read

ONEKEY EN 40000: What Manufacturers Must Prove Under the CRA

EN 40000 turns CRA requirements into concrete duties. See what Part 1-3 asks manufacturers to document and how to prove it. Read more.

ONEKEY AI Agent: Get to Firmware Security Answers Faster

Explore how ONEKEY AI Agent simplifies firmware security with AI-assisted vulnerability investigation, SBOM exploration, OQL queries, and product guidance.

Stop Digging Through Tabs: Meet the ONEKEY AI Agent

Discover how the ONEKEY AI Agent uses a multi-agent architecture and platform data to help security teams analyze firmware, CVEs, and findings faster.

How should manufacturers prepare for CRA vulnerability and incident reporting through the ENISA Single Reporting Platform, and can it currently be automated?

Learn how manufacturers can prepare for CRA vulnerability and incident reporting via the ENISA Single Reporting Platform and what can be automated.

Blog

Sep 1, 2026

min read

Red Teaming vs Pentesting

Red teaming and pentesting solve different problems. Compare scope, cost, and outcomes, then get a testing plan built for your systems today.

LLMs CVEs Prioritization

CVE prioritization with LLMs: what the research shows about where AI triage works, where it breaks, and what it means for firmware. Book a demo.

AI Hallucinations Vulnerability Management

AI hallucinations can turn a false finding into a wasted investigation. See how SBOM and VEX build trustworthy vulnerability data. Book a demo.

Post Quantum Cryptography Cconnected Devices

Post-quantum cryptography is coming to every connected device. Learn the risks, NIST standards and how to build crypto-agile firmware. Book a demo.

Automated Binary Firmware Analysis

Automated binary firmware analysis with AI: how it works, where LLMs help, and why source-less scanning matters for connected devices. Book a demo.

Vulnerability Remediation: Process, Tools & Best Practices

Vulnerability remediation for firmware & embedded products: prioritize CVEs with VEX, patch without source code & prove CRA compliance. Book a demo.

Beyond the Hype: LLMs, Mythos, and the Future of Firmware Analysis

Discover how LLMs like Claude Mythos are reshaping firmware security, accelerating vulnerability discovery, and why deterministic platforms like ONEKEY remain essential for scalable, reliable firmware analysis.

Vulnerability Management Framework: How to Meet CRA & NIS2 Requirements Efficiently

All 6 NIST vulnerability management components explained – and how a vulnerability management tool accelerates implementation. Read the guide now!

Software Composition Analysis (SCA): Definition, Function, and Tips

Software Composition Analysis protects your software supply chain. Learn how SCA, SBOM, and CRA are related – and what ONEKEY can do. Read the guide.

Vulnerability Management Life Cycle: Steps And Workflows

Vulnerability management life cycle: A guide to core phases, best practices, and challenges for ensuring compliance.

NIS-2 Compliance With SBOMs: A Secure Supply Chain Strategy

Learn how SBOM practices support NIS-2 compliance by improving software supply chain visibility, vulnerability response, and audit-ready evidence.

Firmware Security Reports: Essential Components And Strategic Value

Beyond the SBOM: how firmware security reports identify vulnerabilities and provide audit-ready evidence for PSIRT and product compliance teams.

SBOM Report: Essential Components And Why It Matters

An SBOM report provides visibility into software components and risks. This guide covers essential requirements for security and regulatory compliance.

RTOS Cyber Security and Compliance in Embedded Systems

RTOS-based products introduce long-term security and compliance risks. This guide outlines governance, vulnerability management, and regulatory strategies.

SBOM and VEX Workflows for Scalable Vulnerability Management

SBOMs provide transparency, while VEX enables risk-based prioritisation. Learn how to integrate both into compliance workflows.

Software Supply Chain Security Best Practices: A Strategic Guide for Product Leaders

The CRA is coming. Learn best practices for securing the software supply chain, from SBOMs to binary analysis. Read now!

Threat Modeling in the SDLC: A Strategic Guide for Product Security

Integrate threat modeling efficiently into all phases of the SDLC. Avoid costly design errors and meet CRA requirements. Learn more!

SBOM For Firmware and Embedded Software in DevSecOps

Learn about the challenges firmware SBOMs pose in DevSecOps and how teams are pragmatically solving them.

What Is a Software Bill of Materials (SBOM)? Meaning, Example & Use Cases

Discover the meaning of a Software Bill of Materials (SBOM), see real examples, and learn how SBOMs strengthen software security and compliance today.

What Is a Security Vulnerability? Definition & Examples

Find out what a security vulnerability is, see common examples of vulnerabilities in security, and learn how to manage risks effectively. Read more!

No market approval without cybersecurity: How companies can successfully implement the CRA

The EU Cyber Resilience Act (CRA) makes cybersecurity a must for CE marking. Learn how companies can achieve compliance, ensure security, and secure market access.

Static Source Code Analysis vs. Binary Scanning

Compare static source code analysis and binary scanning. Learn how ONEKEY gives you full visibility, detects real risks, and generates SBOMs – even without source code.

Sebastian Schneider

Customer Success Engineer

Blog

May 23, 2025

min read

ONEKEY Platform Update May 2025

Explore ONEKEY’s latest platform enhancements, including advanced RTOS firmware analysis, ELF dependency visualization and many more

Reducing Common Vulnerabilities and Exposures (CVEs) in Software Development

Stay informed & stay protected with our blog on the EU Cyber Resilience Act. Learn what the new regulation means for your business & how to stay compliant.

Sara Fortmann

Senior Marketing Manager

SBOM Delivery: Methods, Requirements & Setup

Blog

Jan 8, 2023

min read

SBOM Delivery: Methods, Requirements & Setup

Learn how to deliver an SBOM: compare delivery methods, meet CRA, NIS2 and FDA requirements, and automate distribution with ONEKEY. Book a demo.

Tanja Sommer

All Blog Posts

Blog

Jan 8, 2023

min read

SBOM Delivery: Methods, Requirements & Setup

Learn how to deliver an SBOM: compare delivery methods, meet CRA, NIS2 and FDA requirements, and automate distribution with ONEKEY. Book a demo.

New Solution on Automated Zero-Day Exploits Discovery!

Blog

Sep 28, 2022

min read

New Solution on Automated Zero-Day Exploits Discovery!

The ONEKEY firmware analysis platform finds unknown zero day vulnerabilities to prevent attacks in product cybersecurity. Read more!

ONEKEY is appointed "Top Industrial IoT Solutions Provider in Europe"

Blog

Sep 14, 2022

min read

ONEKEY is appointed "Top Industrial IoT Solutions Provider in Europe"

This year, ONEKEY, with its technology-leading SaaS platform for automated software analysis of IoT devices, is "Top IoT Solutions Provider"

Experts recommend: Managing Risks in the Software Supply Chain of Industrial Equipment & Products

Blog

Sep 6, 2022

min read

Experts recommend: Managing Risks in the Software Supply Chain of Industrial Equipment & Products

New expert whitepaper on managing risks in the software supply chain using IEC 62443 and automated software BOMs now available!

Blog

Feb 7, 2022

min read

Top 6 IoT security myths – busted

You think that IoT security is too expensive? Or that your company is not at risk? We debunk the most common misconceptions about IoT security!

Pwn2Own: IoT Inspector Research Lab uncovers vulnerabilities in Cisco router

Blog

Nov 10, 2021

min read

Pwn2Own: IoT Inspector Research Lab uncovers vulnerabilities in Cisco router

The IoT Inspector Research Lab successfully identified three previously unknown vulnerabilities in the Cisco RV340 router at Pwn2Own 2021.

Blog

Oct 12, 2021

min read

IoT Inspector Industry News Q3 2021

IoT News Q3: Discover our latest advisory, our new pricing, and dig deeper into the topic of supply chain security.

wizlynx group Partners with IoT Inspector to #makeIoTsecure

Blog

May 19, 2021

min read

wizlynx group Partners with IoT Inspector to #makeIoTsecure

wizlynx group and IoT Inspector announce their collaboration and aim to bring increased IoT firmware analysis capacities to global customers.

Blog

May 17, 2021

min read

IoT Security Report 2021

The new figures from IoT Inspector's Security Report 2021 are alarming. Download the pdf free of charge!

check out white papers

Explore in-depth whitepapers on cybersecurity and compliance, designed to strengthen your product’s security and compliance.

Meet Us at Events

Join us at industry-leading events and connect with our experts in person to learn how to enhance your cybersecurity and compliance strategies.

latest security insights

Explore in-depth research on firmware analysis, threat detection, and product security, powered by the ONEKEY platform.

Make cybersecurity and compliance efficient and effective with ONEKEY.

See it in Action

ONEKEY EN 40000: What Manufacturers Must Prove Under the CRA

ONEKEY AI Agent: Get to Firmware Security Answers Faster

Stop Digging Through Tabs: Meet the ONEKEY AI Agent

How should manufacturers prepare for CRA vulnerability and incident reporting through the ENISA Single Reporting Platform, and can it currently be automated?

Red Teaming vs Pentesting

LLMs CVEs Prioritization

AI Hallucinations Vulnerability Management

Post Quantum Cryptography Cconnected Devices

Automated Binary Firmware Analysis

Vulnerability Remediation: Process, Tools & Best Practices

Beyond the Hype: LLMs, Mythos, and the Future of Firmware Analysis

Vulnerability Management Framework: How to Meet CRA & NIS2 Requirements Efficiently

Software Composition Analysis (SCA): Definition, Function, and Tips

Vulnerability Management Life Cycle: Steps And Workflows

NIS-2 Compliance With SBOMs: A Secure Supply Chain Strategy

Firmware Security Reports: Essential Components And Strategic Value

SBOM Report: Essential Components And Why It Matters

RTOS Cyber Security and Compliance in Embedded Systems

SBOM and VEX Workflows for Scalable Vulnerability Management

Software Supply Chain Security Best Practices: A Strategic Guide for Product Leaders

Threat Modeling in the SDLC: A Strategic Guide for Product Security

SBOM For Firmware and Embedded Software in DevSecOps

What Is a Software Bill of Materials (SBOM)? Meaning, Example & Use Cases

What Is a Security Vulnerability? Definition & Examples

No market approval without cybersecurity: How companies can successfully implement the CRA

Static Source Code Analysis vs. Binary Scanning

ONEKEY Platform Update May 2025

Reducing Common Vulnerabilities and Exposures (CVEs) in Software Development

SBOM Delivery: Methods, Requirements & Setup

SBOM Delivery: Methods, Requirements & Setup

New Solution on Automated Zero-Day Exploits Discovery!

ONEKEY is appointed "Top Industrial IoT Solutions Provider in Europe"

Experts recommend: Managing Risks in the Software Supply Chain of Industrial Equipment & Products

Top 6 IoT security myths – busted

Pwn2Own: IoT Inspector Research Lab uncovers vulnerabilities in Cisco router

IoT Inspector Industry News Q3 2021

wizlynx group Partners with IoT Inspector to #makeIoTsecure

IoT Security Report 2021

check out white papers

Meet Us at Events

latest security insights

Ready to automate your Product Cybersecurity & Compliance?