Metalware

What Metalware is

Metalware is a binary analysis platform for locating crashes and vulnerabilities in embedded firmware. It accepts ELF and raw .bin files, including ROMs, binary images, update blobs, and extracted components, with a device or board profile; debug symbols are optional. The platform works without physical hardware, source code, or a test harness. It emulates an ARM Cortex-M processor, models memory-mapped peripheral input and output, detects DMA buffers, and uses coverage-guided fuzzing with generation, mutation, and symbolic input methods. Analysis runs through a web interface, CLI, or CI/CD API, as a cloud service or on-premise deployment. Results include stack traces, root-cause analysis, and reproducible proof-of-concept inputs, with time-travel debugging plus Ghidra, Binary Ninja, and remote GDB support. GitHub Actions and GitLab CI workflows can file issues automatically. PDF reports are available for audits. The default analysis lasts 24 hours and can be changed in the dashboard.