NetRise Turbine

NetRise, Inc. is a software supply chain security company registered in Austin, Texas, United States, and since September 2026 part of Dragos. It aims to remove blind trust in third-party software by showing exactly what runs inside firmware, kernels, operating systems, containers and applications used by government, critical infrastructure, telecom, energy and healthcare organisations.

NetRise Turbine analyses compiled code rather than source code, so buyers can build accurate SBOMs and find risk in the software that actually runs on devices without installing agents. NetRise Provenance adds context on the origin of open-source components, their maintainers and repository health, and scopes the blast radius of a compromise. ZeroLens identifies weaknesses in compiled software, and integrations push results into existing security workflows.

• Binary analysis: Analyses compiled code in firmware, operating systems, containers and applications.
• SBOM generation: Builds software bills of materials from what actually ships.
• NetRise Provenance: Assesses component origin, maintainers and repository health.
• Blast radius scoping: Shows how far a compromised component spreads across assets.
• ZeroLens: Identifies weaknesses in compiled software.
• Integrations: Feeds results into existing security and procurement workflows.

A telecom operator can analyse router and CPE firmware from suppliers before mass rollout. A power utility can inventory the software inside substation devices and check exposure when a new vulnerability is disclosed. A bank can assess the open-source components inside vendor applications during procurement.

Buyers can verify vendor software and device firmware they do not control, since roughly 80% of a vendor's code is written by outside developers. The company reports identifying the blast radius of a compromised component in under one minute and finding vulnerable assets with zero delay, compared with days or months during incidents such as XZ Utils and Log4Shell.

Supply chain attacks such as SolarWinds and 3CX pushed governments to require SBOMs and risk-based patching from software suppliers. Telecom operators, utilities and government agencies in Vietnam and Southeast Asia buy large volumes of imported network equipment and OT devices, creating demand for independent verification of firmware before and after deployment.

Legal entity NetRise, Inc., Austin, Texas, USA. NetRise agreed to be acquired by Accenture, and the site states that it is now a Dragos company (September 2026), operating under the NetRise brand. Launch partner for its federal managed offering is Asc3nd Technologies Group.