Finite State Secures $27 Million to Combat AI-Driven Vulnerabilities in Connected Devices
Finite State has raised $27 million in Series C funding to enhance its AI-powered product security platform, aiming to help device manufacturers address the growing threat of AI-discovered vulnerabilities.
Finite State, a company specializing in product security and software supply chain risk management, announced a significant $27 million Series C funding round. The investment, led by The O.H.I.O. Fund with participation from CIBC Innovation Banking, Energy Impact Partners, Energize Capital, and National Grid Partners, will fuel the expansion of its AI-driven platform and its global operations.
The company's core offering is an AI-powered platform designed to analyze the software and firmware embedded within connected devices. This analysis allows manufacturers to gain visibility into the products they build and sell, ranging from vehicles and medical equipment to industrial control systems and consumer electronics. The platform's capabilities include uncovering both known and zero-day vulnerabilities, providing manufacturers with the intelligence needed to fix exploitable flaws before they can be leveraged by attackers.
This funding arrives at a critical juncture for product security, often referred to as the "Vulnpocalypse." The rapid advancement of AI has drastically reduced the time it takes to discover vulnerabilities and develop exploits, shrinking the window from weeks to mere hours. Connected devices, with their complex software supply chains and often slow patching cycles, are particularly susceptible to these accelerated threats. Manufacturers are increasingly facing the challenge of identifying which of their deployed products contain specific vulnerabilities.
Compounding these technical challenges are mounting regulatory pressures. Governments worldwide are mandating "secure-by-design" principles, requiring manufacturers to demonstrate robust security measures before products reach the market. Regulations such as the EU Cyber Resilience Act, FDA premarket cybersecurity requirements, and UNECE R155/R156 for vehicles place the onus on manufacturers to prove their product's security, with non-compliance risking market access, recalls, and significant liability.
Modern connected products are typically assembled from a complex web of open-source libraries, third-party components, and legacy code from various suppliers. This intricate composition means that the final firmware often deviates from the initial bill of materials or source code, creating a "black box" effect for manufacturers. Finite State's platform aims to provide the necessary visibility into this "software bill of materials" (SBOM) to address these "what ships in the box" challenges.
Mike Venerable, Founding Partner at The O.H.I.O. Fund, highlighted the difficulty of securing these complex devices and the growing regulatory landscape. He stated that Finite State's platform addresses a "difficult product and technology security challenge" and has earned the trust of its customers. Brittany Blanco from CIBC Innovation Banking echoed this sentiment, noting the company's foresight in anticipating this market shift.
Finite State's client base spans critical infrastructure sectors, including national power grids, U.S. national security laboratories, global automakers, and medical device manufacturers. The company's growth reflects a global challenge: manufacturers must possess a deep understanding of the software within their products, its potential exploitability, and the necessary remediation steps.
Matt Wyckhouse, Finite State's founder and CEO, emphasized that the "Vulnpocalypse" is not a temporary event but the new reality. He stated that AI-equipped attackers can now find flaws faster than most manufacturers can identify affected products. Finite State's platform provides the evidence, intelligence, and automation required to protect manufacturers, organizations, and consumers in this evolving threat landscape.