LegacyMind Device Security

0 reviews

LegacyMind Device Security is the firmware analysis of LegacyMind GmbH, Ingolstadt, Germany. Device manufacturers upload the firmware as they ship it: an embedded Linux image, a bare-metal build from Keil, IAR or GCC (ELF and AXF; BIN and HEX together with the AXF of the same build), or a supplier SBOM in CycloneDX or SPDX. No source code and no agent on the device. It returns the components with their versions, the known vulnerabilities for each with their source, actively exploited ones first, embedded keys and credentials, missing hardening, and reports with findings against EU Cyber Resilience Act Annex I and § 30 BSIG. A version the binary does not evidence stays blank. The SBOM exports as CycloneDX 1.6 or SPDX. After the scan it keeps matching newly published CVEs, KEV and EUVD entries to the same firmware. The manufacturer makes the conformity statement. Firmware is stored and analysed only in Germany. Free CRA readiness check for one firmware image, NDA on request, report within three working days.