Your mission-critical systems carry the weight of your entire organization. Protecting them shouldn't leave you guessing about hidden vulnerabilities or compliance risks.
Rocket® z/Assure™ Vulnerability Analysis Program (VAP) is a specialized mainframe security solution built to proactively scan and safeguard your most valuable environments. By identifying system-level risks before they become active threats, we partner with you to ensure your infrastructure remains locked down, resilient, and fully compliant. We understand the responsibility of managing enterprise security, and our tool gives you the exact insights you need to confidently eliminate weak points.
Key benefits for your security team:
- Identify and resolve hidden vulnerabilities with deep, automated scanning.
- Protect your mission-critical data from evolving external and internal threats.
- Streamline compliance reporting with clear, actionable security insights.
Take control of your mainframe security. Partner with Rocket Software to protect your digital foundation today.
Learn more
Admin By Request EPM is an endpoint privilege management solution for Windows, macOS, and Linux. It removes permanent local admin rights and grants elevation only when a task requires it, so a compromised account can't take over an entire system. Elevation applies to applications rather than user accounts, and privileges can be delegated by user or group to fit developers, general staff, and third-party contractors alike. Threat and behavioral analytics identify risky users, assets, and software, and every session is logged for auditing. The solution runs from a single portal, works online or offline, and requires no additional servers or databases.
Learn more
ObjectSecurity BinLens
Traditional methods of cybersecurity fall short when it comes to safeguarding modern IT/OT/ICS software and devices. The generation of Software Bill of Materials (SBOM) is primarily focused on identifying only known vulnerabilities in existing software. Moreover, source code analysis alongside static application security testing (SAST) often yields excessive false-positive results, which can hinder timely remediation efforts. Additionally, network scans can be ineffective for devices that are not directly connected to the network. To achieve deeper security insights, consider BinLens™—an all-encompassing solution for advanced binary analysis. Formerly known as the ObjectSecurity OT.AI Platform, BinLens™ takes an integrated approach that merges various techniques to identify potential zero-day vulnerabilities with exceptional accuracy. Its capabilities are enhanced by automated symbolic execution, which is particularly adept at revealing memory-safety violations and other undefined behaviors present in binary programs, leading to a significantly reduced false-positive rate compared to other tools available in the market. Furthermore, BinLens™ simplifies and automates critical manual reverse engineering processes such as static analysis, disassembly, and decompilation, making it an invaluable asset in the realm of cybersecurity.
Learn more
Devirt
Devirt (devirt.re) is a binary devirtualization and reverse engineering service for security researchers and malware analysts. It recovers the logic hidden inside virtualized binaries. Protectors replace chosen functions with bytecode for a custom virtual machine and ship an interpreter to execute it, which leaves IDA, Ghidra or Binary Ninja showing a dispatcher and handler routines rather than the original code.
How it works: Devirt executes the protected program, reconstructs how its virtual machine moves state and control, and rewrites that behavior as native-shaped functions. Each function then faces three checks: a solver search for any input on which the two versions disagree, a differential run of the lifted LLVM IR against the original, and, for IDA deliveries, a reopen test confirming names and typed calls survived.
Coverage: automated recovery handles recognized VMProtect, Themida and Code Virtualizer builds, plus Enigma Protector and Obsidium profiles. Loki-based machines, .NET virtualizers, commercial packers, JavaScript VM obfuscation and custom designs begin with a free review and a written offer.
Outputs: IDA database, annotated pseudocode, analyst report, LLVM IR or structured JSON, with a ledger stating what is proven, what needs a runtime input, what remains unresolved and what the file alone can never settle.
Workflow fit: a REST API with completion webhooks submits files and retrieves results, and a read-only MCP connector lets REA and other MCP-compatible reversing agents read assessments, jobs and ledgers. Files are processed in isolation and never used for model training; only owners or authorized parties may submit.
Devirt (devirt.re) is not related to compiler devirtualization, the C++ optimization in GCC and LLVM.
Learn more
