Memfault unveils IoT compliance toolkit

With Memfault, customers will have the tools they need to meet some of the common compliance requirements including vulnerability detection in deployed devices and the management and distribution of OTA updates.

The hardware industry is on a journey to build more secure products, but historically, connected devices have been a weak link in the cybersecurity ecosystem. Governments and regulatory bodies are taking notice and looking for ways to ensure that proper protections are in place for the more than 18 billion connected devices worldwide. The European Cyber Resilience Act (CRA), for example, will require all digital products sold in the EU to meet stricter cybersecurity standards by 2027. In the US, voluntary programs like the FCC's Cyber Trust Mark and NIST's Cybersecurity Framework are expected to set the standard.

While emerging global frameworks differ, they all emphasise key themes: visibility into vulnerabilities and field issues, end-user reporting, and secure over-the-air update capabilities for rapid issue resolution. Memfault provides the tools necessary to meet these critical compliance requirements, helping companies avoid possible legal issues, significant financial penalties, and restricted market access.

Memfault's compliance-capabilities include:

Vulnerability detection: monitors anomalous behaviour across an entire fleet of devices to identify vulnerabilities and understand their impact across your fleet.

Deployed device and software inventory: keeps track of every deployed device with a record of its hardware components, Software Bill of Materials, and the currently active software version

Issuing vulnerability fixes: provides OTA security updates automatically and securely to in-field devices and an audit log of every OTA action

Compliant monitoring data collection: collects monitoring data from your fleet securely and in compliance with existing and new regulatory requirements.

"IoT compliance regulations will encourage hardware companies to prioritize security measures at every stage of product development, from production through end-of-life, resulting in more secure devices and a stronger security ecosystem," said François Baldassari, CEO of Memfault. "Memfault has been building a standardised approach to help customers meet many of the key requirements from existing and future frameworks, making it easier to meet accreditations and compliance requirements from day one."

All current and future Memfault customers have access to the current compliance toolkit, with new updates in the works that will continue to help customers meet evolving compliance requirements.