Eclypsium is a security company that provides a platform for continuously monitoring firmware, hardware, and software within critical assets. Its purpose is to detect threats, backdoors, implants and vulnerabilities that sit below the operating system - an area conventional tools often overlook. The company describes its work as establishing trust in the devices that run critical infrastructure, and holds that infrastructure security should be treated as basic IT hygiene.
The Eclypsium platform monitors each critical asset for firmware, hardware and software threats and weaknesses. It is used by Fortune 100 enterprises and federal agencies, and is aimed at sectors including critical infrastructure, federal government and enterprise IT. Technical work spans firmware and hardware security, BIOS security, supply chain security, vulnerability research, chip-to-cloud security and USB/device forensics.
The firm was founded by former Intel security researchers and engineers, and its team comprises security researchers, engineers and industry veterans. It operates from Portland with remote-friendly, distributed teams. The stated culture prioritises rigorous research and practical impact over hype; documented work includes uncovering BIOS backdoors and analysing X-rays of suspicious USB cables.
Recognition includes being named a Gartner Cool Vendor and one of Fast Company's Most Innovative Security Companies.
