Eclypsium

• CISA states the Continuous Diagnostics and Mitigation Approved Products List is closed to new submissions, and reopening it would let rivals submit products for the same catalog.
• The most recent attestation in the reviewed record is a SOC 2 Type II report the company announced in 2022, and if no current report exists, a regulated buyer's review stalls.
• Coverage across many manufacturers is the differentiator on the vendor's own pages, and a manufacturer extending integrity checks to rival hardware would narrow it.
• Every named customer appears only on Eclypsium's own pages, so if a reference check fails to confirm one, no independent source backs the adoption claims.
• The deployment figures, including the 30 million device binaries, are the company's own, so a buyer who sizes a deal on them carries the risk that they overstate the footprint.
• Eclypsium's public profile rests on research it publishes itself, so if that output slows, the outside coverage that carries the company's name today slows with it.

The problem sits below the layer that endpoint security tools read. Eclypsium's platform page states that attacker tactics have shifted toward endpoint firmware and network edge devices, where traditional endpoint detection and vulnerability management cannot see. A Hacker News article records an evaluation of three Palo Alto Networks firewall models that turned up known firmware flaws and misconfigured security features. Palo Alto Networks answered that it was aware of the published research.

The evidenced buyers sit in regulated industries. Eclypsium's homepage carries attributed statements from executives at DigitalOcean, First Financial Credit Union and Lockheed Martin. The same page presents American Express, Motorola, KDDI and IPG under a trusted-by heading with no statement attached, and KDDI's open innovation fund also appears in the record as a Series B investor, so those four names are marketing references rather than evidenced customers.

A federal purchasing channel runs through CISA and it is closed to newcomers. CISA describes its Continuous Diagnostics and Mitigation Approved Products List as the authoritative catalog for approved products meeting the program's technical requirements, reviewed submission by submission against established criteria. The same page states the list is not accepting new submissions for the indefinite future. Eclypsium announced in July 2022 that its platform had been added to that list. [s2, s13, s1, s10, s18, s14, s15]

The platform does three jobs across one device fleet. Eclypsium's platform page describes inventorying components, hardening devices, and detecting threats in hardware infrastructure. The hardening work covers firmware integrity and configuration drift monitoring plus automated patching, and the detection work targets indicators of compromise in hardware, firmware and software. Findings leave through configurable alerts, REST APIs and integrations with security operations tooling.

Coverage breadth is the claim that carries the product, and only the company puts a number on it. SecurityWeek states that Eclypsium covers dozens of hardware vendors and monitors thousands of devices, servers, networking products and GPU clusters. The company's own release puts the same coverage at hundreds of thousands of end-user devices and over 30 million device binaries analyzed. A buyer sizing the deployed base works from the seller's figure.

A second offering is free and public. Eclypsium launched InfraTrust in July 2026 as a knowledge base of hardware and firmware risk, with a monthly digest called InfraTrust Pulse, and describes it as a free resource. The site groups advisories by manufacturer, naming Dell, Cisco, Lenovo, HPE, HP, Fortinet, AMD and NVIDIA. [s2, s12, s18, s17, s16]

Eclypsium sells coverage across manufacturers that each control their own firmware. SecurityWeek states that the platform covers dozens of hardware vendors, and the homepage sets HP, Lenovo, Dell, Apple, Intel, Hewlett Packard Enterprise, Microsoft and AMD beside a sentence about protecting enterprise hardware. The reviewed sources do not establish what those manufacturers cover on each other's hardware, so the breadth claim rests on Eclypsium's own description of its coverage.

One named peer appears in the independent record. A TechCrunch article naming the Series B describes Finite State as a startup providing firmware-based supply chain security for connected devices, and quotes Bulygin arguing that most cybersecurity vendors treat this layer of protection as an afterthought.

The research work shows the position from the other side. A Hacker News article records that Eclypsium evaluated three Palo Alto Networks firewall models and that Palo Alto Networks responded to the findings. Palo Alto Networks appears on Eclypsium's homepage as covered technology and in the research as a subject. That research doubles as a public demonstration of the firmware inspection the platform sells. [s1, s2, s11, s13]

Named customers all appear on Eclypsium's own pages. Executives at DigitalOcean, First Financial Credit Union and Lockheed Martin give attributed statements on the homepage, which is stronger evidence than the customer names the same page carries without comment. No reviewed source outside the company names a customer or sizes the customer base.

Partner motion is documented and mostly vendor-stated. The company names SHI, WWT, GuidePoint Security and Myriad360 as expanded channel partnerships. A SecurityWeek article states that Eclypsium joined the NVIDIA Inception Program, which is the one partnership signal an outside publication carries.

Revenue evidence is absent from the reviewed record. SecurityWeek noted in 2022 that the company claimed significant growth in annual recurring revenue and customer base, and attributed that claim to the company. No reviewed source states a revenue figure, a customer count or a retention measure, so a buyer comparing Eclypsium with a rival works from the company's own account of its scale. [s1, s18, s12, s10]

The founders still hold the top jobs nine years on. Eclypsium's team page lists Yuriy Bulygin as chief executive and founder and Alex Bazhaniuk as chief technology officer and founder. The 2024 Form D names Yury Bulygin as an executive officer and director and Oleksandr Bazhaniuk as a director, and lists the company as a Delaware corporation in Portland, Oregon.

The founding record is in firmware specifically. TechCrunch states that Bulygin spent nearly a decade at Intel leading security threat analysis and directing research on software and hardware vulnerabilities, then became senior director of advanced threat research at McAfee before founding CHIPSEC, an open source platform security assessment framework. Eclypsium's company page dates the founding to 2017 and names Bazhaniuk as the Intel colleague who joined him.

The research output continues and outside publications cover it. A Hacker News article of January 2025 records the Palo Alto Networks firewall evaluation, and the homepage lists later research posts on a Cisco firewall crash, a Fortinet flaw and a Windows recovery bypass. That is a publication habit rather than a single event. [s4, s7, s11, s3, s13, s1]

The attestation on record is four years old and self-announced. Eclypsium stated in June 2022 that Armanino LLP had completed a SOC 2 Type II report against the AICPA Trust Services Criteria. No reviewed source dates a more recent report, so a regulated buyer would have to ask for a current one.

The probed trust surfaces carry a disclosure policy and no attestation listing. The Security and Trust page heads a Trust Center section and then presents a vulnerability disclosure policy inviting researchers to report issues. The trust and security subdomains did not resolve when probed on 2026-09-04.

The compliance material addresses the buyer's obligations. Eclypsium's compliance page states that supply chain security, firmware security and device integrity have become priorities across industry standards and regulations, and maps NIST SP 800-161 and SP 800-193 to what the platform does. Those are the customer's requirements rather than certificates the company holds. [s19, s5, s6]

Add analyzed competitors to compare them side by side with Eclypsium.

Eclypsium segments by device class first and by industry second. Its platform page groups coverage into user endpoints, servers, network devices and AI hardware, and the site organizes solutions by energy and utilities, financial services, government and telecommunications. The named customers match those segments.

The evidenced buyers sit at the regulated end. Executives at DigitalOcean, First Financial Credit Union and Lockheed Martin appear with attributed statements, and SecurityWeek describes the customers as critical infrastructure organizations and enterprises. American Express, Motorola, KDDI and IPG appear on the same page under a trusted-by heading with no statement attached, and KDDI's open innovation fund also appears in the record as a Series B investor, so those four are marketing references rather than evidenced customers.

The federal segment has its own gate. Eclypsium announced in July 2022 that CISA had added its platform to the Continuous Diagnostics and Mitigation Approved Products List, and CISA describes that list as the authoritative catalog for approved products meeting the program's technical requirements. CISA states that its acquisition office gives federal agencies several ways to purchase approved products.

The engineering claim is about seeing below the operating system. Eclypsium's platform page describes verifying the integrity and authenticity of every device and component, monitoring firmware integrity and configuration drift, and detecting indicators of compromise in hardware, firmware and software. The homepage names the targets as rootkits, bootkits, implants and backdoors that evade endpoint detection.

Breadth across manufacturers is the second claim. SecurityWeek states that the platform covers dozens of hardware vendors, and the homepage sets HP, Lenovo, Dell, Apple, Intel, Hewlett Packard Enterprise, Microsoft and AMD beside a sentence about protecting enterprise hardware. Each of those manufacturers controls the firmware Eclypsium inspects.

AI hardware is the newest surface. The homepage already lists AI hardware among what the platform protects, and SecurityWeek describes further coverage of GPU-based AI servers, network edge systems and enterprise connected devices as planned investment. The same article states that the company joined the NVIDIA Inception Program.

Selling runs through partners as well as direct. Eclypsium names SHI, WWT, GuidePoint Security and Myriad360 as expanded channel partnerships, and a SecurityWeek article states that it joined the NVIDIA Inception Program. The federal path runs through the purchasing catalog the company announced joining in 2022.

Free research is the top of the funnel. A Hacker News article of January 2025 covers Eclypsium's evaluation of three Palo Alto Networks firewall models, which is trade coverage the company earned by publishing. It also launched InfraTrust in July 2026 as a free hardware risk knowledge base with a monthly digest.

The demand proof stays inside the company's own pages. No reviewed source outside Eclypsium names a customer, states a revenue figure or sizes the customer base. SecurityWeek recorded in 2022 that the company claimed significant growth in annual recurring revenue and attributed that claim to the company.

Nothing paid is priced in public. No price, package or tier appears on any Eclypsium page in the reviewed record, and the calls to action lead to a demo request or a guided product tour. That pattern fits a negotiated enterprise sale.

The charging unit is not published either. The company describes its coverage in devices monitored and binaries analyzed, which suggests a per-device or per-fleet basis, and no reviewed source states the unit. A buyer cannot compare cost against a rival from the public material.

One offering is explicitly free. Eclypsium describes InfraTrust as a free resource and publishes it on a separate site, so the paid platform and the free knowledge base are presented to buyers separately.

Delivery is software the customer runs against its own fleet. Eclypsium describes a cloud-based platform that identifies, verifies and fortifies firmware in laptops, servers, network gear and connected devices, and SecurityWeek calls it a SaaS platform. The customer's team configures it and owns the outcomes.

Findings leave through the customer's existing tooling. The platform page describes configurable alerts, REST APIs and integration with security operations tooling, and the homepage describes enriching a customer's existing systems with component-level inventory, vulnerability and threat data. That places Eclypsium beside the security stack rather than inside the network traffic it watches.

Operations span the device lifecycle. The site organizes use cases as onboarding, production and decommissioning, and the company describes operationalizing security throughout the fleet and lifecycle of enterprise devices.

The one attestation on record is four years old and announced by the company. Eclypsium stated in June 2022 that Armanino LLP had completed a SOC 2 Type II report against the AICPA Trust Services Criteria. No reviewed source dates a later report.

The probed trust surfaces carry a disclosure policy and no certificate listing. The Security and Trust page heads a Trust Center section and then presents a vulnerability disclosure policy inviting researchers to report issues. The trust and security subdomains did not resolve when probed on 2026-09-04.

The compliance page speaks to the buyer's obligations. It maps NIST SP 800-161 and SP 800-193 to what the platform does, and states that supply chain security, firmware security and device integrity have become priorities across industry standards and regulations. Those are the customer's requirements rather than certificates Eclypsium holds.

Eclypsium's business sits downstream of hardware it does not build. The homepage sets HP, Lenovo, Dell, Apple, Intel, Hewlett Packard Enterprise, Microsoft and AMD beside a sentence about protecting enterprise hardware, and each of them publishes the firmware the platform inspects. A manufacturer changing its firmware format or attestation would land on Eclypsium first.

The integration surface points at the customer's security stack. The platform page describes REST APIs and integration with security operations tooling, and the homepage describes enriching existing security information and IT service management systems. Those are the systems a buyer would keep after a switch.

One ecosystem relationship runs through research. A Hacker News article records that Eclypsium evaluated three Palo Alto Networks firewall models and that Palo Alto Networks responded to the published findings, and the homepage lists Palo Alto Networks among covered technology. Eclypsium inspects vendors whose products it also covers.

Both founders still hold the top jobs nine years on. Eclypsium's team page lists Yuriy Bulygin as chief executive and founder and Alex Bazhaniuk as chief technology officer and founder. The 2024 Form D names Yury Bulygin as an executive officer and director and Oleksandr Bazhaniuk as a director.

The founding expertise is in firmware specifically. TechCrunch states that Bulygin spent nearly a decade at Intel leading security threat analysis and directing research on software and hardware vulnerabilities, then became senior director of advanced threat research at McAfee before founding CHIPSEC, an open source platform security assessment framework. Eclypsium's company page names Bazhaniuk as the Intel colleague who joined him in 2017.

The board carries an investor director. The 2024 Form D lists Timothy Porter and Alex Doll as directors and John Ewert as an executive officer, and SecurityWeek quotes Alex Doll of Ten Eleven Ventures and notes that he joined the board with the Series B round.