Finite State

Finite State first put itself on the map in 2019 with a public expose of vulnerabilities in Huawei's networking products, and the company has spent the years since turning that kind of binary-level analysis into a continuous platform. Today the work centers on the EU Cyber Resilience Act and similar regulations: generating SBOMs, VEX, and signed compliance packages for medical device makers, automotive companies, IoT vendors, and customers in aerospace, defense, and critical infrastructure. The product is positioned as an autonomous Product Security OS that runs design to verify to prove, grounded in what the customer actually ships.

Internally the team runs on a values acronym called CLARITY: Customer first, Leverage, Agency, Results, Integrity, Transparency, and a final "Why" that ties the daily work back to the mission of securing connected products. The engineering org self-identifies as AI-first, with Cursor, Devin, and GitHub Copilot in the day-to-day developer flow and Anthropic, LangChain, LlamaIndex, and Vertex AI inside the product. Finite State is Series B (Drive Capital led a $30M round in 2021) and ships from a fully distributed team across North America, Europe, and APAC.