Avalue teams with Exein on firmware vulnerability analysis

Avalue Technology Inc. said Oct. 20, 2026, that it is partnering with Exein to add firmware vulnerability analysis and runtime security into its product security workflow. The move is aimed at helping industrial device makers prepare for the EU Cyber Resilience Act and other cybersecurity rules.

Why it matters: - The partnership is designed to help embedded-device makers see software risks earlier and respond faster across design, deployment and maintenance. - The collaboration targets CRA readiness, which raises the bar for manufacturers on vulnerability management, documentation and post-deployment support. - Avalue says the approach can also reduce compliance uncertainty for customers in regulated sectors including healthcare, manufacturing, transportation, energy and retail.

What happened: - Avalue Technology Inc. announced a partnership with physical AI security company Exein on Oct. 20, 2026, in Taipei. - Avalue will integrate Exein Analyzer into its product security and lifecycle management processes. - The companies said the effort combines Exein’s vulnerability analysis and real-time threat detection with Avalue’s hardware, BSP, operating system and embedded development expertise. - The companies said the goal is to help customers identify cybersecurity risks, understand software composition and prepare remediation or mitigation steps for international cybersecurity requirements.

The details: - Exein Analyzer can inspect firmware binaries or ingest software bills of materials, or SBOMs, to identify software components, versions and known vulnerabilities. - Exein provides software analysis and runtime security technologies for embedded systems. - Avalue said it uses actual product platforms as the basis for its security workflow rather than a standalone tool deployment. - Avalue said its process combines software analysis, runtime protection, system integration and lifecycle maintenance. - Avalue said it can correlate Exein Analyzer scan results with a product’s system architecture to determine whether listed vulnerabilities affect the deployed device. - Avalue said it can work with BSP, operating system and supplier resources to evaluate updates, apply patches, adjust security settings or add other mitigation measures when vulnerabilities do affect a product. - On supported platforms, Avalue can also integrate Exein Runtime to validate event detection, policy enforcement and on-device protection. - Avalue said it will continue supporting vulnerability monitoring, version management, security advisories and product maintenance planning after deployment. - Avalue said the combined approach supports software transparency, product cyber resilience and the technical documentation needed for CRA readiness. - Avalue said it draws on experience with x86- and Arm-based industrial computing platforms, plus expertise in hardware, BIOS, firmware, BSPs and Linux operating systems.

Between the lines: - The partnership shows Avalue is positioning cybersecurity as a product lifecycle service, not just a feature added late in development. - The focus on matching scan results to real system architecture suggests a shift away from generic CVE lists toward device-specific risk assessment. - The collaboration also links pre-deployment analysis with post-deployment runtime protection, which could make Avalue more useful to customers facing audits and long-term support obligations.

What's next: - Avalue said it will use the partnership to support customers as they prepare for CRA and other cybersecurity requirements. - The company said the collaboration should help accelerate deployment in global markets. - For more information, Avalue directed readers to its Global Cybersecurity Compliance webpage. More information