Metalware
product.metalware.com
Spec sheet
- Purpose
- Metalware analyzes firmware binaries to find crashes and vulnerabilities using rehosting, fuzz testing, and program analysis.Read 7 Oct 2026 · product.metalware.com
- Product
- Metalware is a binary analysis platform that combines rehosting, fuzz testing, and program analysis to find crashable bugs and vulnerabilities in embedded systems.Read 7 Oct 2026 · product.metalware.com
- Intended users
- The maker describes use by product security teams, DevSecOps, reverse engineers and vulnerability researchers, and firmware engineers.Read 7 Oct 2026 · product.metalware.com
- Deployment
- Metalware is available as a cloud service or on-premise deployment; the on-premise instructions require a modern Linux computer with Docker.Read 7 Oct 2026 · metalware.com
- Support
- The contact page lists [email protected] and says the team typically responds within 24 hours.Read 7 Oct 2026 · metalware.com
- Company
- The company site identifies the maker as Metalware Inc.; LinkedIn lists its headquarters as San Francisco, California, and its founding year as 2023.Read 7 Oct 2026 · linkedin.com
- Analysis duration
- The default analysis duration is 24 hours and can be configured from the dashboard.Read 7 Oct 2026 · metalware.com
- Analysis output
- Defect details include root cause analysis, a stack trace, and a reproducible proof-of-concept input.Read 7 Oct 2026 · metalware.com
- Analysis results
- Defects include a stack trace, root cause analysis, and proof-of-concept input, and can be reproduced with time-travel debugging.Read 7 Oct 2026 · metalware.com
- CI/CD integrations
- The maker documents GitHub Actions and GitLab CI workflows, with options to file discovered defects as GitHub or GitLab issues.Read 7 Oct 2026 · metalware.com
- Debugger integrations
- Metalware provides Ghidra and Binary Ninja plugins and remote GDB for investigating defects.Read 7 Oct 2026 · metalware.com
- Debugging integrations
- Metalware provides debugging through Ghidra and Binary Ninja plugins and remote GDB.Read 7 Oct 2026 · metalware.com
- Emulation
- It runs firmware on an emulated ARM Cortex-M processor and models peripheral I/O without physical hardware.Read 7 Oct 2026 · metalware.com
- Emulation and fuzzing
- Metalware emulates an ARM Cortex-M processor, models memory-mapped peripheral I/O, automatically detects DMA buffers, and uses coverage-guided fuzzing.Read 7 Oct 2026 · metalware.com
- Fuzzing
- Its coverage-guided fuzzer tracks basic blocks, keeps inputs that reach new code, and mutates them to explore further.Read 7 Oct 2026 · metalware.com
- Input requirements
- Metalware supports ELF and raw .bin binaries for ARM Cortex-M firmware, and debug symbols are not required.Read 7 Oct 2026 · metalware.com
- Inputs
- It accepts firmware ELF files, ROMs, binary images, update blobs, and extracted components, with a device or board profile and optional symbols or metadata.Read 7 Oct 2026 · product.metalware.com
- Issue tracking
- The CLI can automatically file newly discovered defects as GitHub or GitLab issues and deduplicates previously filed issues.Read 7 Oct 2026 · metalware.com
- No hardware or source
- The maker says analysis runs without physical hardware or source code, and requires no test harness.Read 7 Oct 2026 · metalware.com
- Notable limits
- The docs specify support for ARM Cortex-M firmware and say on-premise fuzzing is CPU intensive, with performance scaling linearly with core count.Read 7 Oct 2026 · metalware.com
- On-premise requirements
- The on-premise documentation says a modern Linux computer with Docker should work and that fuzzing is CPU intensive, with performance scaling linearly with core count.Read 7 Oct 2026 · metalware.com
- Reports
- Metalware generates a downloadable PDF report for every defect, with summary, root cause analysis, stack trace, and proof-of-concept data.Read 7 Oct 2026 · metalware.com
- Supported firmware
- The documentation says Metalware supports ELF and raw .bin binaries for ARM Cortex-M firmware, and debug symbols are not required.Read 7 Oct 2026 · metalware.com
- Workflow access
- Users can run analysis through a web interface, CLI, or CI/CD API.Read 7 Oct 2026 · product.metalware.com
Where Specifiction places it
- Fuzz Testing Software#17 of 267.4
