Karamba XGuard Runtime Integrity for Embedded Devices

Karamba Security Ltd. is a product security company registered in Hod Hasharon, Israel, with a US office in Bloomfield Hills, Michigan. It protects embedded and edge devices such as printers, vehicle ECUs and telematics gateways, solar inverters, EV chargers and medical imaging systems against attacks that exploit firmware vulnerabilities, and says its software runs on millions of devices.

XGuard is runtime integrity software built into the device image. A policy is generated automatically from the firmware at build time and signed with a key held off the device, so even an attacker with root access cannot disable it. Eight controls cover a binary allowlist, deep Python inspection, execution, file, process and device access control, data encryption and control flow integrity against ROP and JOP attacks. A companion product, VCode, scans firmware binaries in CI/CD pipelines to produce an SBOM and detect vulnerabilities.

• Binary allowlist: Blocks any executable not included in the factory image.
• Control flow integrity: Stops ROP and JOP memory attacks, including at kernel level.
• Deep Python protection: Prevents tampered scripts and interactive Python misuse.
• Access controls: Restricts execution, files, processes and peripherals such as cameras and GPS.
• Signed off-device policy: Auto-generated at build time and cannot be disabled by root.
• VCode firmware scanning: Builds a binary-derived SBOM and detects vulnerabilities in CI/CD.

An electronics manufacturer in Vietnam can embed XGuard in printer, camera or router firmware for export brands. A solar inverter or EV charger maker can harden devices already in the field without hardware redesign. A truck telematics provider can retrofit gateways across a fleet to block remote code execution.

Devices stay protected even when known vulnerabilities cannot be patched quickly, because unauthorised code and memory manipulation are blocked at runtime. The agent uses under 1 MB and under 1% CPU and needs no hardware changes, so it fits existing products. Deployments include HP business printers since 2020, solar inverters in over 128 countries and a retrofit across a fleet of 1 million trucks.

AI tools make it cheaper to turn known vulnerabilities into working exploits, while connected devices often stay in the field for years without updates. Regulations such as the EU CRA and FDA premarket rules push device makers toward built-in protection. Vietnam and Southeast Asia are major production hubs for printers, electronics, inverters and vehicle components supplied to global brands.

Legal entity Karamba Security Ltd., 24 HaNagar Street, Hod Hasharon, Israel, with a US office in Bloomfield Hills, Michigan. Customer and partner logos include HP, Samsung, Hitachi, Volvo, Stellantis, Mahindra, SolarEdge, LS Electric, ChargePoint and Orthoscan. HP renewed its multi-year XGuard licence in February 2026, extending a relationship that began in 2020.