CertChain

CertChain is a web app (with a lightweight desktop agent) that verifies IoT firmware authenticity and supply-chain integrity before devices are deployed or updated. It ingests firmware images, SBOMs, and vendor signing metadata, then enforces a simple “allow only verified builds” policy for your fleet. The desktop agent integrates with common update pipelines and on-prem update servers to block unsigned or mismatched firmware, alerting security and ops with clear remediation steps. This is a combination traditional + AI app: traditional cryptographic verification and policy enforcement, plus AI-assisted parsing of messy vendor release notes/SBOMs and anomaly detection on versioning patterns (e.g., suspicious downgrades, unexpected component swaps). It’s designed for small-to-mid manufacturers and enterprises that can’t afford a full-blown platform but still need real controls against firmware tampering and counterfeit updates.