Robots and physical AI
Robots, drones and autonomous machines.
CYBERSECURITY FOR PHYSICAL AI, CONNECTED DEVICES AND SOFTWARE
Could a hacker get into your product?
Find out for free.
KROMSE finds the known security holes in your device, app or web app and explains each one in plain words. Then it repairs them and proves nothing else broke. Your engineer approves before anything ships.
Report within 2 business days · NDA on request · Talk to a founder, not a sales team
Works with embedded Linux · Yocto · NVIDIA Jetson · apps · web apps · code
Device update ready
- 3 security holes repaired
- 13/13 checks passed
- Awaiting your approval
Supported by
Finding security holes is getting easy. Fixing them safely is not.
One bad update can stop every device you’ve sold from working. So every fix is rebuilt and retested by hand. That takes months and a team of security engineers most companies don’t have.
60%
of consumer IoT makers can’t even receive a security hole report, let alone fix it and ship the fix to every device.
Todaymonths
With KROMSEhours
How KROMSE secures your products, step by step
- 01 Scan
Send us your device software, or connect your code. KROMSE lists every part inside it.
- 02 Find
Every known security hole in your exact version, explained in plain words and ranked by risk.
- 03 Repair
KROMSE prepares the fix in the exact spot.
- 04 Prove
KROMSE tests your device software to show the fix works and nothing else changed.
- 05 Approve
Your engineer reviews the evidence. Nothing ships without a yes.
- 06 Ship
Release the update with an evidence report ready for the CRA and other rules.
The step nobody else does on device software.
SEE IT IN ACTION
From scan to a fix waiting for your yes
Risk assessment
0/100
High risk
Higher means more urgent
Open findings by severity
This scan
0 open findings
- Critical 2
- High 45
- Medium 36
- Low 6
- Info 15
See all findings
Rook Off
Prepare eligible fixes within your reviewed scope.
northwind-devices/fleet-portal · You approve the full diff before draft PR delivery.
Built for teams that make products, from physical AI to software
Industrial gateways and controllers
The boxes that run factories, buildings and energy systems.
Cameras and edge AI
Smart cameras and devices that run AI on board.
Energy and EV chargers
Chargers, inverters and smart meters.
Apps and web apps
The mobile, desktop and web apps that come with your product, or stand on their own.
Devices running embedded Linux, plus apps, web apps and code. Building something else? Ask us.
Selling in the EU, UK or US? The rules now put a clock on security holes.
- EU Cyber Resilience Act: reporting actively exploited security holes has been required since 11 September 2026. Every other obligation applies from 11 December 2027. Fines reach €15 million or 2.5% of global turnover.
- US medical devices: FDA cybersecurity requirements (section 524B).
- Vehicles: UNECE R155. UK consumer devices: PSTI Act.
KROMSE gives you the evidence: what’s inside your product (SBOM), which security holes affect it, what was fixed and how it was checked.
KROMSE does not certify compliance and sends nothing to authorities. Your team makes the final call.
Read our Cyber Resilience Act guide →02 / FOLLOW THE EVIDENCE
The scan is only the beginning.
Record your team’s determination and supporting evidence. Use them in an internal CRA report draft, with missing information visible and human review still required.
Check for freeEvidence recordedHuman review required
Start with a free security check
2 business days
Free security check
- A plain-English report of the known security holes in your device software, ranked by risk
- Which ones KROMSE can repair and prove on your build
- A sample of your CRA evidence report
- A 30-minute call with a founder to walk through it
Then a 4-week pilot
- One product, with success criteria agreed before we start
- Security holes repaired and proven on your exact build, with your engineers
- A complete evidence pack for the CRA
- Fixed price, agreed in writing and credited to your first year [CONFIRM: pricing wording]
Your software stays yours
- NDA signed before you send anything, if you want one.
- Used only for your check or pilot. [CONFIRM: retention and deletion policy]
- The application, database and scanners run in Germany; scan evidence and firmware are stored with Cloudflare, and AI requests go to providers outside the EU.
SOFTWARE TEAMS AND SOLO FOUNDERS
Building an app or a web app? Start free today.
Scan a website by its address or connect your code. KROMSE finds the security holes and explains each one in plain words, so one developer can fix them without a security team.
Web apps and websites
Check a website by its URL, or connect the code behind it.
Mobile and desktop apps
Connect the app’s code or upload its parts list (SBOM).
Cloud, code and containers
Cloud services, APIs, container images and infrastructure as code: what you deploy.
Free to start, no card, no call. Paid plans from €49 a month, billed annually.
Questions product teams ask us
What is firmware?
It’s the software that runs inside a device: in a robot, a camera or a charger. Like any software, it can have security holes that need fixing for the device’s whole life.
Which products does KROMSE work with?
Devices running embedded Linux, including Yocto-based builds and NVIDIA Jetson, plus apps, web apps, code and containers. If your product runs something else, for example Android or an RTOS, tell us and we’ll say honestly whether we can help.
Does KROMSE change anything on my products?
No. KROMSE prepares and tests the fix. Your engineer reviews the evidence and decides. You ship the update through your own process.
Does KROMSE make me CRA compliant?
No tool can do that on its own. KROMSE gives you the evidence the CRA asks for: what’s inside your product, which security holes affect it, what was fixed and how it was checked. Your team makes the final call.
Is my software safe with you?
We sign an NDA before you send anything, if you want one. [CONFIRM: retention and processing summary]
How long does the free check take?
Within 2 business days of receiving your software.
Does KROMSE find unknown security holes too?
KROMSE focuses on known security holes (CVEs) in the parts inside your device. These are the ones attackers use most and the ones the CRA asks you to track. [CONFIRM: wording on unknown vulnerabilities]
I’m a solo founder with a web app. Is KROMSE for me?
Yes. Scan a URL or connect your code for free, without a card or a call. Paid plans start at €49 a month, billed annually.
How much does it cost?
For physical products, the check is free and the pilot has a fixed price agreed in writing before we start, credited to your first year. For software, scanning is free to start and paid plans are published on the pricing page.
Could a hacker get in? Find out for free.
First, what do you want to check?
Physical products
Software
Web apps and websitesScan a URL or connect the codeMobile and desktop appsConnect the code or upload an SBOMCloud, code and containersCloud services, APIs, containers and infrastructure as code
Free, no card. Start in minutes.