Challenge:

A leading global asset management firm needed to secure thousands of third-party devices across its global network — including firewalls, VPN concentrators, branch routers, and network access control systems. Despite a mature vulnerability management program, visibility into device software and component inventories was incomplete. Manual audits were slow and unreliable.

The firm turned to NetRise to:

• Build a comprehensive inventory of components inside all vendor devices.

• Uncover vulnerabilities and secrets hidden within firmware and device software.

• Validate vendor claims without source code or questionnaires.

• Automate audit-ready evidence for compliance and GRC workflows.
  
  

Solution:

By deploying the NetRise Platform, the firm analyzed firmware and device software from over 278 assets.
NetRise extracted component inventories, identified CVEs, located hard-coded keys and secrets, and mapped third-party libraries.
Security teams used this evidence-based data to strengthen vendor assessments, procurement reviews, and ongoing monitoring — updating GRC workflows to require NetRise scans during onboarding and renewal.

Outcomes:

Within 90 days, the firm identified hundreds of previously unknown vulnerabilities, including those listed in CISA’s Known Exploited Vulnerabilities (KEV) catalog.
Machine-generated evidence from NetRise supported internal audits and regulatory reviews, giving leadership clear visibility into vendor-related risk.

The organization moved from relying on vendor self-attestation to verifying software directly, improving:

• Component and firmware visibility

• Vulnerability prioritization and defensibility

• Regulatory and compliance posture
  
  

Why it Matters:

NetRise helps financial institutions:

• Verify third-party software integrity

• Validate SBOM accuracy without source code

• Meet regulatory frameworks like PCI DSS 4.0, NYDFS, SEC Cybersecurity Rules, FFIEC, and NAIC Model Law

• Build trust and resilience across the software supply chain

Ready to Verify What’s Inside Your Software?

Gain visibility into the software and components that matter most to your business. With NetRise, your team can go beyond surface-level assessments to uncover hidden risks — from outdated libraries and hard-coded credentials to misconfigurations and exploitable dependencies.

See exactly what’s running on the devices and applications that power your financial systems, validate vendor claims with evidence-based assurance, and strengthen your compliance posture with continuous visibility into your software supply chain.