Eclypsium

Eclypsium is a cybersecurity company whose platform is built to secure the software, firmware and hardware layers beneath the operating system across enterprise and government IT infrastructure. Its coverage spans user endpoints, servers, network devices and AI hardware, and it addresses use cases such as device lifecycle security (onboarding, production monitoring and decommissioning), firmware security, cyber supply chain risk management (C-SCRM), ransomware defense and zero trust for endpoints. The platform continuously monitors devices in production, generates a software bill of materials (SBOM) for components and system code, remediates firmware vulnerabilities and insecure configurations, and detects low-level threats such as rootkits, bootkits, implants and backdoors that evade endpoint detection and response tools.

Technically, the company monitors a broad set of firmware and component classes, including network and wireless firmware, graphics and storage firmware, server management controllers (BMC, iLO, iDRAC), PC management engines such as Intel Management Engine, security components including TPM and the AMD Platform Security Processor, and peripheral firmware and microcode. Detection is based on integrity verification and baseline deviation analysis, supported by a database of known-good firmware hashes. Findings can be exported into existing SIEM, ITSM and security operations tooling via a REST API, and the platform is offered both as a cloud service and as an on-premises installation.

Eclypsium also publishes public vulnerability and threat research, including CHIPSEC-related hardware security work and blog analyses of specific CVEs and network-edge incidents, which it positions as an input to its commercial platform. In 2026 the company extended coverage to GPU-based AI servers in data centers, network edge appliances and enterprise connected devices.