# Red Balloon Security

> Red Balloon Security is a cybersecurity company specializing in firmware-level defense for embedded devices and critical infrastructure. Founded in 2011, the company develops patented technologies that protect devices at the binary level - without requiring source code access, hardware modifications, or device downtime. Core focus areas include runtime defense, firmware hardening, binary analysis, and FPGA assurance. Red Balloon Security operates in defense, automotive, industrial, healthcare, and enterprise sectors.

## Company

- [About Red Balloon Security](https://redballoonsecurity.com/about-2/): Company overview, mission, and founding story. Developers of Symbiote, the first host-based firmware defense technology.
- [Research](https://redballoonsecurity.com/research/): Published CVE disclosures, DARPA program research, peer-reviewed papers, and conference presentations (DEFCON, Black Hat, IEEE).
- [Publications](https://redballoonsecurity.com/publications/): Academic and industry publications authored by the RBS research team.
- [News & Media](https://redballoonsecurity.com/news/): Press releases, press mentions, and media coverage.
- [Case Studies](https://redballoonsecurity.com/case-studies/): Real-world deployments including HP Enterprise Printers, DARPA RADICS Program, and SBIR Phase III.

## Products and Platforms

- [Runtime Defense (Symbiote)](https://redballoonsecurity.com/runtime-defense/): Symbiote is Red Balloon Security's flagship runtime defense technology. It hardens embedded devices at runtime by preserving code and memory integrity - blocking unauthorized execution paths and detecting integrity drift in real time. Deployed without source code or hardware changes. Zero in-field exploits across 150 billion protected device-hours.
- [Firmware Hardening](https://redballoonsecurity.com/firmware-hard/): Binary-level firmware hardening that reduces attack surface, improves CVE scoring, and helps devices pass penetration tests. Applied at the firmware layer without performance impact.
- [OFRAK (Binary Analysis)](https://ofrak.com/): Open-source binary analysis and modification framework. Enables firmware unpacking, patching, and analysis without source code. Used for vulnerability research, firmware auditing, and SBOM generation at the binary level.
- [Bitwise (FPGA Assurance)](https://bitwise.co/): FPGA security assurance platform for verifying the integrity of field-programmable gate arrays in critical systems. Protects against hardware trojans, bitstream tampering, and supply chain compromise.

## Solutions by Industry

- [Automotive ECU Security](https://redballoonsecurity.com/automotive-ecu-solutions/): Runtime defense and monitoring for automotive ECUs and software-defined vehicles. Supports UN R155, calibration anti-tamper, OTA update resiliency, and incident response telemetry.
- [Industrial and Building Management Systems](https://redballoonsecurity.com/industrial-bms/): Firmware-level defense for OT/ICS devices and BMS controllers. Supports IEC 62443 readiness at the device layer without network-layer dependencies.

## Key Technical Concepts

- [Why Embedded Device Security Is Essential to ICS Systems](https://redballoonsecurity.com/why-embedded-device-security-is-essential-to-ics-systems/): Technical explainer on firmware-level threats in industrial control systems and critical infrastructure.

## Resources

- [Newsletter (Embedded Defense Brief)](https://redballoonsecurity.com/newsletter/): Periodic newsletter covering embedded security research, CVE disclosures, and industry developments.

## Optional

- [Contact / Request Demo](https://redballoonsecurity.com/contact/): Primary commercial contact point. RBS sells to enterprise, defense, and government customers through a direct sales motion.
- [Sitemap](https://redballoonsecurity.com/sitemap.xml): Full site index.