Free · one image
Upload firmware, read the report
We send the link to the report to your business e-mail address.
Free · one image, no access to your network
What is in the firmware of your devices?
Free vulnerability check.
Upload the firmware update of a device you run: router, controller, gateway. You see every component, with its version where the file proves it, the known vulnerabilities, which of them are actively exploited, and credentials in the image. No source code, no information from the vendor needed.
The first image is free. Whether we then check every device type in your plant, you decide with the report in hand.
LegacyMind GmbH · Ingolstadt · HRB 12510 · What happens to your firmware
What applies to the free vulnerability check
- Servers in Germany
- No access to your network, only the file
- NDA on request before the upload
- Report within three working days, deleted after 30 days
- Passwords and keys appear in the report masked
- Encrypted firmware is not decrypted
How it works
Get the file, upload, read the report
1
Get the file
The firmware file you would install as an update: from the vendor's download area or your own archive. No access to the device, no access to your network.
2
Upload
Choose the file, enter your business e-mail address, confirm you may have the firmware checked. The link to the report arrives by e-mail.
3
Read the report
Every component with its location, and its version where the file proves it, the known vulnerabilities, which of them are actively exploited, and credentials or keys in the image. Ben Plannet, CTO, gets in touch personally and walks you through the findings. The app and the report are in German.
NIS2
Vulnerabilities in devices you did not build
NIS2 (in Germany § 30 BSIG) requires important and essential entities to handle vulnerabilities, in devices they buy as well. What is inside their firmware rarely appears on a data sheet. The report names it per device, with component, version and the source of each vulnerability, as a technical basis for your assessment.
More: Section 30 BSIG at a glance. The terms of the check (German): Terms.
Questions
What operators ask first
- We did not build the firmware. Does it still work?
- Yes, that is what the check is for. We read the components from the file itself, without source code and without information from the vendor. What we cannot prove is marked “not evidenced” in the report.
- Do you need access to the device or our network?
- No. We analyse only the file you upload. The device and your network stay untouched.
- Does the report help with vulnerability management under NIS2?
- The report gives technical findings for one device: components, versions, known vulnerabilities. How you take them into your vulnerability management and assess them is your decision. The report is not a certificate or a conformity assessment.
- What does it cost afterwards?
- The first image is free and commits you to nothing. Whether we then check every device type in your plant and monitor it continuously, we discuss with the report in hand.
One device, checked free
Upload the firmware of one device above. Rather talk first? Write to info@legacymind.de or call +49 176 81152657.