ADolus

aDolus Technology Inc. operates as a specialized software intelligence provider focused on the security of critical infrastructure. The company was established in 2017 by Eric Byres, a recognized expert in industrial control system (ICS) and operational technology (OT) security. Byres is known for inventing the Tofino Security technology, a widely deployed OT-specific firewall, and his background includes extensive experience in controls engineering and security research, which directly informs aDolus's mission. The company's formation was supported by research grants from the U.S. Department of Homeland Security's Silicon Valley Innovation Program. In June 2021, Rod Campbell, an executive with a strong background in finance and M&A, joined as CEO to steer the company's growth, allowing Byres to focus on the technology as CTO. A significant milestone occurred in July 2024, when aDolus was acquired by Exiger, a market leader in supply chain and third-party risk AI, to enhance software supply chain visibility.

The core of aDolus's business is its software-as-a-service (SaaS) platform, the Framework for Analysis and Coordinated Trust (FACT). This platform addresses the mounting security risks within the software supply chain, a problem amplified by high-profile incidents like the SolarWinds attack and regulatory actions such as U.S. Executive Order 14028. aDolus serves clients in critical sectors including energy, manufacturing, defense, and healthcare, who operate industrial control systems (ICS), Industrial Internet of Things (IIoT), and other smart devices. Its clients range from major automation companies and asset owners to system integrators. The business model is centered on providing continuous visibility and risk intelligence for software and firmware. The company generates revenue by offering access to its platform, which helps organizations ensure that the software they use is legitimate, tamper-free, and safe to install.

The FACT platform works by collecting and correlating information from numerous sources about software used in critical systems. It employs artificial intelligence and machine learning to analyze software binaries, even for legacy systems or when source code is unavailable, to generate a comprehensive Software Bill of Materials (SBOM). This SBOM is then enriched with data on vulnerabilities, malware, and component provenance. A key feature is the generation of a 'FACT score,' a trustworthiness rating analogous to a credit score, which simplifies decision-making for security and operational teams. The platform can identify hidden third-party components, counterfeit software, and country-of-origin issues, providing a deep level of analysis that goes beyond what is typically available. This capability is crucial for clients needing to comply with new cybersecurity regulations and to rapidly respond to newly discovered vulnerabilities across their entire asset inventory.

Keywords: software supply chain security, operational technology security, industrial control systems, critical infrastructure protection, SBOM, software bill of materials, firmware analysis, vulnerability management, third-party risk management, IoT security, IIoT security, cybersecurity SaaS, binary analysis, malware detection, counterfeit software detection, risk intelligence, Exiger, FACT platform, Eric Byres, OT cybersecurity