RunSafe Security Builds Momentum in Embedded Cybersecurity and SBOM Leadership

RunSafe Security featured prominently this week for its focus on software bill of materials, or SBOM, and embedded-system cyber risks. The company used multiple LinkedIn posts, a technical blog, conference talks, and media commentary to underline gaps in existing tools and approaches to software supply chain security.

RunSafe highlighted that generating SBOMs for C and C++ applications is unusually difficult due to static linking, vendored dependencies, custom build systems, and the absence of a centralized package manager. A new blog reviewing 12 SBOM tools targeting C and C++ aims to guide embedded, aerospace, and defense customers facing stringent regulatory and security demands.

The company also emphasized that many embedded and product security teams remain dissatisfied with current SBOM solutions, citing manual workflows, false positives, and incomplete results. RunSafe promoted build-time SBOM integration as a more effective strategy for C and C++ environments, implicitly positioning its offerings around embedded software supply chain visibility.

Thought leadership was another theme, with Director of SBOM Kelli Schwalm presenting “Your SBOM Is Probably Wrong: Here’s How to Know” at OWASP Boston. The talk focused on SBOM drift in embedded and firmware environments and methods for assessing SBOM accuracy, reinforcing RunSafe’s specialization in SBOM integrity and software transparency.

Beyond SBOM, RunSafe spotlighted cyber risks in embedded and cyber-physical systems through its “Exploited: The Cyber Truth” series with experts from MITRE. The discussions argued that traditional prevention and patch-based models are often inadequate for long-lived operational technology, advocating a resilience-focused approach tailored to embedded environments.

Chief Technology Officer Shane Fry’s comments in a Fortune article on AI-driven threats further extended this theme, noting that artificial intelligence is accelerating vulnerability discovery and exploit development across IT and OT. He called for embedding protections directly into software to prevent reliable exploitation, aligning RunSafe with proactive, software-level defenses for critical infrastructure.

Collectively, these activities strengthen RunSafe Security’s positioning in embedded cybersecurity and SBOM-led supply chain security, enhancing its credibility with regulated and critical infrastructure customers. The week underscored a consistent strategy of using deep technical thought leadership and market education to support future demand for its specialized security solutions.