104% more reported CVEs per day in 2026 than last year.

Compare

Embedded and product security

Firmware and device security for connected products under the CRA.

Updated

Where embedded security tools act A connected product moves from build to firmware image to a device in the field. CRACI works at the build, for example a Yocto BitBake build, and records what it fetched. ONEKEY and Finite State analyze the firmware image as a binary, and Finite State also analyzes supplier SBOMs. Exein runs on the device and monitors its behavior. Build such as Yocto BitBake CRACI Records what the build fetched: a build SBOM and provenance Firmware image the binary you ship ONEKEY Finite State Analyze the binary, including code you did not build yourself Device in the field Exein Runs on the device and monitors its behavior Evidence for the CRA can come from each stage; the tools complement each other

Each comparison says what the other product does well, where CRACI is different, and when you would use both. For every category, see all comparisons.

CRACI compared with each tool

Side by side

Several tools on one page, for when you are choosing a category, not one product.

Other categories

See CRACI on your own pipeline

Book a demo and we will walk through your builds, your SBOMs and your compliance evidence.

Book a demo