Robots and physical AI
Robots, drones and autonomous machines.
Live
A new attack every hour. Can hackers get into your device?Find and fix security holes in device firmware
Your device is built from hundreds of open-source parts. New holes in them are found every day. KROMSE finds the ones inside your firmware, repairs them and proves the device still works.
Embedded Linux · Android · Yocto · NVIDIA Jetson · NDA on request · You talk to a founder
- new warnings this week
- 1,207
- already used in attacks
- 12
- to fix a device by hand
- months
Live
- Debian SecurityNew security hole found in Debian network-manager-iodine
- Debian SecurityNew security hole found in Debian pdns-recursor
New device flaws this week. Is one in yours?
Real reports about Linux, network gear and the parts devices are built from. Every device you have shipped carries some of them.
See every report, liveSupported by
Finding security holes is getting easy. Fixing them safely is not.
One bad update can stop every device you’ve sold from working. So every fix is rebuilt and retested by hand. That takes months and a team of security engineers most companies don’t have.
60%
of consumer IoT makers can’t even receive a security hole report, let alone fix it and ship the fix to every device.
Todaymonths
With KROMSEhours
01 / 06
How KROMSE secures your products, step by step
- 1ScanSend us your device software, or connect your code. KROMSE lists every part inside it.
- 2FindEvery known security hole in your exact version, explained in plain words and ranked by risk.
- 3RepairKROMSE prepares the fix in the exact spot.
- 4ProveKROMSE tests your device software to show the fix works and nothing else changed.
- 5ApproveYour engineer reviews the evidence. Nothing ships without a yes.
- 6ShipRelease the update with an evidence report ready for the CRA and other rules.
The step nobody else does on device software.
SEE IT IN ACTION
From scan to a fix waiting for your yes
Risk assessment
0/100
High risk
Higher means more urgent
Open findings by severity
This scan
0 open findings
- Critical 2
- High 45
- Medium 36
- Low 6
- Info 15
See all findings
Rook Off
Prepare eligible fixes within your reviewed scope.
northwind-devices/fleet-portal · You approve the full diff before draft PR delivery.
Built for teams that make products, from physical AI to software
Industrial gateways and controllers
The boxes that run factories, buildings and energy systems.
Cameras and edge AI
Smart cameras and devices that run AI on board.
Energy and EV chargers
Chargers, inverters and smart meters.
Apps and web apps
The mobile, desktop and web apps that come with your product, or stand on their own.
Devices running embedded Linux, plus apps, web apps and code. Building something else? Ask us.
Start with a free security check
2 business days
Free security check
- A plain-English report of the known security holes in your device software, ranked by risk
- Which ones KROMSE can repair and prove on your build
- A sample of your CRA evidence report
- A 30-minute call with a founder to walk through it
Then a 4-week pilot
- One product, with success criteria agreed before we start
- Security holes repaired and proven on your exact build, with your engineers
- A complete evidence pack for the CRA
- Fixed price, agreed in writing and credited to your first year
Your software stays yours
- NDA signed before you send anything, if you want one.
- Used only for your check or pilot.
- The application, database and scanners run in Germany; scan evidence and firmware are stored with Cloudflare, and AI requests go to providers outside the EU.
Questions product teams ask us
What is firmware?
It’s the software that runs inside a device: in a robot, a camera or a charger. Like any software, it can have security holes that need fixing for the device’s whole life.
Which products does KROMSE work with?
Devices running embedded Linux, including Yocto-based builds and NVIDIA Jetson, plus apps, web apps, code and containers. If your product runs something else, for example Android or an RTOS, tell us and we’ll say honestly whether we can help.
Does KROMSE change anything on my products?
No. KROMSE prepares and tests the fix. Your engineer reviews the evidence and decides. You ship the update through your own process.
Does KROMSE make me CRA compliant?
No tool can do that on its own. KROMSE gives you the evidence the CRA asks for: what’s inside your product, which security holes affect it, what was fixed and how it was checked. Your team makes the final call.
Is my software safe with you?
We sign an NDA before you send anything, if you want one. Where your files are processed and how long they are kept is on our security and data page.
How long does the free check take?
Within 2 business days of receiving your software.
Does KROMSE find unknown security holes too?
KROMSE focuses on known security holes (CVEs) in the parts inside your device. These are the ones attackers use most and the ones the CRA asks you to track.
I’m a solo founder with a web app. Is KROMSE for me?
Yes. Scan a URL or connect your code for free, without a card or a call. Paid plans start at €59 a month.
How much does it cost?
For physical products, the check is free and the pilot has a fixed price agreed in writing before we start, credited to your first year. For software, scanning is free to start and paid plans are published on the pricing page.
Book a demo
Tell us what you build. A founder shows you KROMSE on a device like yours, and what a first free check would cover.
Request a demo
Tell us about your product and what you’d like to see. We’ll contact you to arrange a demo with a product expert.