BugProve Platform is an automated IoT firmware analysis and vulnerability detection system that performs security testing on firmware binaries and embedded systems. It combines static, dynamic, and semi-dynamic analysis techniques to identify both known vulnerabilities (CVEs) and potential zero-day security issues in IoT device firmware without requiring source code access. The platform supports analysis of entire firmware images and ELF binaries across multiple architectures including ARM, MIPS, PowerPC, Intel, RISCV, and Tilera, with a focus on embedded Linux systems, FreeBSD, and µC/OS operating systems. It incorporates PRIS (Production-grade concolic analysis) for firmware binary analysis to detect vulnerabilities like buffer overflows and command injection vulnerabilities. The system implements both cloud-based, self-hosted, and air-gapped deployment options for firmware security testing.
