About
Toradex produces embedded computing hardware and accompanying software for Single Board Computers (SBCs), Computer on Modules (CoM) and System on Modules. The site emphasizes production-ready software, strong integration between hardware and software, and software support including Long Term Supported (LTS) production releases. Product lifecycle states (In Development, Sample Production, Volume Production, Last Time Buy, End-of-Life) and software release cadence are documented. A site page titled "SBOM Reports" and mention of a Hardware Security Module (HSM) appear in the record, indicating published supply-chain or security-related artifacts alongside their hardware and software offerings.
Related Vendors
Ketryx is a subscription-based SaaS platform for medical device software compliance and application lifecycle management (ALM). It enables teams to generate FDA-compliant SBOMs in minutes via scanning or SPDX import and is built around the Ketryx Compliance Framework. The product explicitly targets regulatory and quality standards including IEC 62304, GMP, ISO 13485, EU MDR, and CFR 21 Part 820/11. The site highlights “Agentic AI for FDA Compliance.” Ketryx is sold as monthly, annual, and multi-year subscriptions with multiple options based on company size, stage, and products needed. The vendor states validation evidence and documentation are provided upon request and asks buyers to contact sales to learn more.
Finite State positions itself as a product cybersecurity platform for connected devices and embedded systems. The platform uncovers vulnerabilities in source code, binaries, and third-party components and consolidates risks into a unified view across a product portfolio. Finite State says it can dissect source code or binaries with precision to reduce false positives and help teams prioritize and fix issues, and it offers CI/CD integrations and automatic PRs for remediation workflows. The company highlights compliance-readiness, the ability to generate reports to meet regulatory compliance requirements, and notes it is SOC 2 Type 2 certified. The site also references recorded demos and access to expertise from former U.S. government officials.
Threat Detective is SBOM and vulnerability management software for medical device teams. It imports and validates CycloneDX and SPDX SBOMs, identifies vulnerabilities using NVD, GitHub Security Advisories, and OSV, prioritises findings using CVSS, EPSS, and CISA KEV, and records exploitability, remediation, and mitigation decisions with an auditable history. It turns that vulnerability analysis into submission-ready cybersecurity evidence for medical device regulatory workflows, including FDA premarket submissions, and supports VEX generation. Continuous monitoring then tracks active device and software versions for newly disclosed vulnerabilities throughout post-market surveillance.
