Finite State (@FiniteStateInc) header
Finite State (@FiniteStateInc) profile picture

Product and connected device supply chain security for IoT, OT/ICS, and medical devices/IoMT. Working with asset owners + OEMs.

Columbus, OH
Joined November 2017
Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)Photo by Finite State (@FiniteStateInc)
🍂 Finite State is on the road this November! 🤖 Nov 4-7: RobotWorld 🚗 Nov 17-18: ESCAR Europe 🔐 Nov 19-20: bit.ly/2NoSQmF 🩺 Nov 30-Dec 4: Health-ISAC Fall Summit Let's talk product security! Schedule a demo: bit.ly/3OlqE30 #ProductSecurity #FiniteState
1
1
35
🎃 Don't let hidden vulnerabilities haunt your connected products! This Halloween, trade security scares for deeper visibility, smarter risk prioritization, and continuous compliance. 👻 See Finite State in action: bit.ly/3OlqE30 #ProductSecurity #Cybersecurity
1
1
1
8
✨ Employee Spotlight: Janet Bodenbach! Janet brings our principle of Agency to life through ownership, accountability, and dedication to customers and her team. Janet, thank you for your exceptional commitment, initiative, & the positive impact you make every day! 👏
1
1
15
🚀 Stay ahead of evolving cybersecurity regulations. At Embedded World 2026, Finite State's Doc McConnell joined the IMC Council to discuss proactive product security and CRA readiness. 🎥 Watch the conversation: bit.ly/489g0Is. #ProductSecurity #CyberResilienceAct #CRA
2
1
1
13
We sent DOE five recommendations for verifying grid equipment under EO 14421. Two storage controllers can ship with identical paperwork and very different firmware, and evidence from the equipment itself tells them apart. #GridSecurity #Utilities bit.ly/4BvK2n9
2
1
1
15
A baby monitor sold in 2026 contained a vulnerability from 2002. Still in the firmware. Still exposing sensitive data. Under the EU Cyber Resilience Act, manufacturers own the risk, even in white-labeled products. Joshua Marpet explains: bit.ly/48pg2vO #CRA
1
1
1
20
🔴 LIVE from Minneapolis! The conversations shaping the future of product security are happening at the Cyber Security Summit! Attending? Meet with Finite State to discuss stronger product security: finitestate.io/request-demo #CybersecuritySummit
35
The SafePay ransomware group has hit at least 600 critical infrastructure organizations since August 2024, some through exploits dating to 2020. Finite State's Josh Marpet on why an SBOM turns patching into a list you can work through. #Ransomware #SBOM bit.ly/4kie6MW
1
1
1
37
That's a wrap on #ManuSec2026 in Chicago! Thanks to everyone who visited the Finite State booth to discuss stronger product security, greater visibility, and less vulnerability noise. Let's continue the conversation. Request a demo: bit.ly/3OlqE30
2
1
1
34
🔎 Better visibility. Smarter prioritization. Minneapolis is bringing product security into focus! Join Finite State at the 2026 Cyber Security Summit, Oct 27-28. 📅 Schedule time with our team: bit.ly/3OlqE30 #ProductSecurity #CybersecuritySummit #AI
3
1
32
Two-thirds of security leaders at $1B+ companies knowingly leave critical vulns unpatched, and that counts only what they can see. Finite State CSO Sharon Hagi on the bigger backlog hiding in shipped firmware. #ProductSecurity #FirmwareSecurity bit.ly/4BlskTg
2
1
1
23
Let's Connect This November! More opportunities to strengthen #ProductSecurity. Meet Finite State at: 📍 NOV 4-7 | RobotWorld 📍 NOV 17-18 | ESCAR Europe 📍 NOV 19-20 | bit.ly/2NoSQmF 📍 NOV 30 - DEC 4 | Health-ISAC Summit Schedule time with us: bit.ly/3OlqE30
2
1
1
71
Midnight Mimosa malware ships preinstalled in the firmware of thousands of budget smartphones, with system-level control and no uninstall. Finite State's Roland Lindsey on why the shipping binary is where to look, via The IT Nerd: bit.ly/3TYa2XE #FirmwareSecurity
28
Exploitation attempts have been reported for PHP2Shell (CVE-2026-109618, CVE-2026-109619). Many connected products ship older PHP in firmware that will never get a fix. Manufacturers need to know which products carry it, and fast. More: bit.ly/4Bmvx58 #PHP2Shell
1
1
1
85
🎥 Stronger product security starts with visibility and defensible evidence. At Embedded World NA 2026, Finite State’s Doc McConnell joined IMC Council to discuss product security, risk management, and evolving compliance needs. bit.ly/489g0Is #EmbeddedWorldNA
1
1
1
21
Moving connected devices to post-quantum encryption is far harder than upgrading a server. Finite State CSO Sharon Hagi tells CSO the threat is uneven, and that data lifetime and device limits should set the plan for each product line. #PQC #IoTSecurity bit.ly/4iypwe5
1
1
1
23
📍 Live from ManuSec 2026 in Chicago! Two days to connect and advance manufacturing product security. Meet Taryn, Sam, and Jermaine today and tomorrow to discuss visibility, risk prioritization, and compliance. 👉 Visit Booth #35 or schedule time: bit.ly/3TZcblN
2
1
25
🔎 What does stronger product security look like for manufacturers? Join Finite State at #ManuSec2026 in Chicago this week to discuss firmware visibility, real risk prioritization, and continuous compliance. Meet our team: bit.ly/3TZcblN #ProductSecurity
2
1
17
🏆 Finite State Wins 2026 Top InfoSec Innovator Award for Connected Product Security! “You can’t secure a connected product if you don’t know what’s inside it.” Matt Wyckhouse, CEO. Thank you, Cyber Defense Magazine, for this recognition! PR: bit.ly/4865RfA
2
1
2
51
Attackers reportedly cut cooling in hundreds of French supermarkets Oct. 11, pushing some units toward 50°C. Our agent workflow re-found two of three disclosed flaws in a pre-fix controller build within hours. Fixes take months to field. #OTSecurity bit.ly/4zzW5hB
1
2
2
58