I recently learned about Trapezoid, a Florida-area company who apparently sells a commercial firmware product. Unclear which platform(s) and what cost, you have to contact them for any useful information.
Trapezoid® Firmware Integrity Verification Engine is the first integrity monitoring solution designed to detect and alert on attacks and malware affecting BIOS and firmware.
Detect: Trapezoid’s patented Marker tagging technology combines hardware specific data and user defined policy attributes to remotely attest to the identity and integrity of the monitored hardware, detect unauthorized changes to firmware, forensically map virtual machines to physical hardware, and define workload and data boundaries.
Analyze: Trapezoid’s Firmware Integrity Verification Engine proactively identifies and analyzes the integrity of physical devices in the IT infrastructure and creates a full audit trail of virtual assets that associated with those devices.
Remediate: Trapezoid integrates with leading security policy management and reporting tools allowing you to incorporate firmware integrity monitoring into your existing security and compliance framework to address unauthorized changes in firmware.
Our patented Trapezoid® Marker and flexible architecture supporting ANY type of firmware also make Trapezoid the ideal first line of firmware defense for OEMs.
The Trapezoid leadership team is comprised of seasoned security and legal professionals from Terremark (now a Verizon company) with extensive experience in incident response, data center security, security operations, cloud security, risk management and compliance.
Firmware Security 