Finite State

We provide product cybersecurity solutions for connected devices and embedded systems, including IoT, medical devices, and OT/ICS. Our platform helps product security teams protect devices by managing software threats, vulnerabilities, and risks.

We detect vulnerabilities in source code, binaries, open-source software, and third-party components throughout the Software Development Lifecycle (SDLC). Our platform lets you manage and monitor Software Bill of Materials (SBOMs) and vulnerabilities across a product’s lifecycle. It also helps prioritize and mitigate risks with remediation guidance and over 150 DevSecOps integrations.

We support compliance with regulations like the Cyber Resilience Act and FDA’s Section 524B, with end-to-end SBOM management and automated reporting in SPDX and CycloneDX formats. Our platform scans any binary or source code, regardless of origin or format, to find risks in legacy systems and third-party components.

We enrich vulnerability data from over 200 threat sources and support more than 18 programming languages, 130 container, archive, and binary formats, 30 binary instruction set architectures, and 40 package managers. Finite State was founded in 2017 and has 51-200 employees.

Our mission is to protect the connected world. We help product security teams protect devices by managing software threats, vulnerabilities, and risks. Our products and services integrate with existing development and SecOps processes to provide security metrics for product and supply chain risk.

Our core values are:

• Transparency: Be open about our business, teams, and goals, and tackle risks immediately.
• Results: Deliver on our commitments and be flexible to achieve goals.
• Accountability: Do what we promise, take ownership, and set clear expectations.
• Customer Dedication: Provide value to customers, listen carefully, and ensure their success.
• Courage: Voice dissenting opinions, stand up for teammates, and give constructive feedback.

We are a remote-first company with 51-200 employees. Our team includes people from diverse backgrounds: researchers, storytellers, cybersecurity experts, designers, policy leaders, and mentors. Our culture is mission-driven, focused on securing connected devices, and values transparency, ownership, and impact.

We create a supportive and social environment where teams collaborate, and we maintain an active social calendar. We communicate openly through bi-weekly business updates, an open-door policy with the executive team, and fireside chats with board members and stakeholders.

We offer competitive salary and equity. Our benefits include fully covered medical, dental, and vision, a 401k, short and long-term disability, and life insurance.

We provide unlimited PTO and 12 weeks of parental leave. As a remote-first company, primarily in the US and Canada, we offer a work-from-home stipend and flexible hours. Employees also receive learning stipends for professional development and have a high degree of autonomy and ownership.