Platform Overview

Finite State Documentation

Secure your software supply chain — from source to SBOM.

The Finite State Platform gives connected and embedded device manufacturers complete visibility and control over the software they build, ship, and depend on. Deep binary analysis, source code scanning, SBOM management, and continuous vulnerability intelligence — in one place.

Get started →Install the CLI

What the Platform Delivers

SBOM

Complete Software Visibility

Identify every component in your software — from source, binaries, or third-party SBOMs — and understand dependencies, licenses, and vulnerabilities.

CVE

Actionable Risk Intelligence

Continuously enrich your portfolio with the latest vulnerability and exploit data so your team can triage and remediate the issues that actually matter.

SDLC

Developer-Friendly Integration

Plug into existing workflows with a single-binary CLI, REST APIs, CI/CD hooks, and imports from your existing scanning tools.

SPDX

End-to-End SBOM Management

Generate, import, and maintain SBOMs in CycloneDX and SPDX formats. Track changes across versions and meet regulatory requirements.

VEX

Policy-Driven Governance

Apply rules to surface the most critical issues based on severity, exploitability, reachability, age, license, or compliance criteria.

24/7

Always-On Monitoring

Nightly intelligence updates, continuous policy checks, and automated alerts so your security posture stays current without manual effort.

How It Works

The platform operates as an always-on, interconnected set of capabilities that work together to secure your software supply chain.

Ingestion

File uploads, repo connections, CI/CD integrations, third-party scans, APIs

Analysis

Binary & source SCA, dependency mapping, configuration & reachability checks

Enrichment

Vulnerability, exploit, license, and compliance intelligence applied continuously

Evaluation

Real-time policy checks surface the components and findings that matter most

Action

Remediate, apply VEX, update metadata, export SBOMs on demand

Monitoring

Nightly updates, continuous checks, automated alerts, historical tracking

Benefits

Reduce Time-to-Remediation — Quickly identify and resolve the vulnerabilities that truly matter.
Protect Products and Customers — Minimize exposure to known exploits and emerging threats.
Empower Teams — Give analysts and developers a shared, actionable view of software risk.

Ready to start? Head to Get Started for orientation, or jump straight to a Tutorial to import an SBOM or run your first scan.