Skip to content
SPECIFICTION
Get listed

Strig

swarm-security.com

Linux
Visit swarm-security.com
Spec score 6.5 #22 of 24 in Software Supply Chain Security Software

Spec sheet

Purpose
Strig monitors firmware builds, records inputs, compile and link events, and outputs, then produces risk findings and signed audit evidence.Read 8 Oct 2026 · swarm-security.com
Intended users
The product is aimed at firmware and embedded software teams, including R&D, DevSecOps, product security, CISO, quality, and compliance roles.Read 8 Oct 2026 · swarm-security.com
Deployment
The site describes on-premise, fully air-gapped, and SaaS deployment options; on-premise and air-gapped deployments keep source, binaries, and build records inside the customer network.Read 8 Oct 2026 · swarm-security.com
Integrations
Strig can ingest findings from existing tools and capture builds using systems that invoke compiler and linker commands, including Make, CMake, Bazel, Yocto, and Ninja.Read 8 Oct 2026 · swarm-security.com
Support
Customers can request access for a pilot or contact the company to discuss build and compliance requirements.Read 8 Oct 2026 · swarm-security.com
Air-gap details
The operational details for air-gapped vulnerability-data updates and offline licensing are still being finalized, according to the FAQ.Read 8 Oct 2026 · swarm-security.com
Analysis
The platform combines SAST, software composition analysis, SBOM generation, CVE tracking, and binary analysis in one report and release gate.Read 8 Oct 2026 · swarm-security.com
Build comparison
Build-to-build diffs highlight release changes, including dependency updates, hardening flags, and resolved findings.Read 8 Oct 2026 · swarm-security.com
Build gate
Policy thresholds produce a deterministic pass or fail verdict and a CI exit code.Read 8 Oct 2026 · swarm-security.com
Coding standards
The site lists SEI CERT C/C++, MITRE CWE, MISRA C:2025/C++:2023, OASIS SARIF 2.1.0, and the OpenSSF Compiler Hardening Guide as supported.Read 8 Oct 2026 · swarm-security.com
Not a certification
Strig says it produces evidence for assessors but does not certify customers.Read 8 Oct 2026 · swarm-security.com
SBOM
Strig generates CycloneDX SBOMs from compiled source and binaries and flags undeclared components.Read 8 Oct 2026 · swarm-security.com
Security and data
For on-premise and air-gapped scans, the site says Strig blocks its own network access and that no information leaves the environment by design.Read 8 Oct 2026 · swarm-security.com

Plans and prices

Strig Priced on request Licensed per environment · price depends on build volume and deployment model Read 8 Oct 2026 · swarm-security.com

Every Strig plan and price →

Where Specifiction places it

Alternatives to StrigAll alternatives →