On the recordRead 8 Oct 202613 facts
Strig
Plans and prices
Strig
Priced on request
Licensed per environment · price depends on build volume and deployment model
Read 8 Oct 2026 · swarm-security.com
On the record
- Air-gap details
- The operational details for air-gapped vulnerability-data updates and offline licensing are still being finalized, according to the FAQ.swarm-security.com · read 8 Oct 2026
- Analysis
- The platform combines SAST, software composition analysis, SBOM generation, CVE tracking, and binary analysis in one report and release gate.swarm-security.com · read 8 Oct 2026
- Build comparison
- Build-to-build diffs highlight release changes, including dependency updates, hardening flags, and resolved findings.swarm-security.com · read 8 Oct 2026
- Build gate
- Policy thresholds produce a deterministic pass or fail verdict and a CI exit code.swarm-security.com · read 8 Oct 2026
- Coding standards
- The site lists SEI CERT C/C++, MITRE CWE, MISRA C:2025/C++:2023, OASIS SARIF 2.1.0, and the OpenSSF Compiler Hardening Guide as supported.swarm-security.com · read 8 Oct 2026
- Deployment
- The site describes on-premise, fully air-gapped, and SaaS deployment options; on-premise and air-gapped deployments keep source, binaries, and build records inside the customer network.swarm-security.com · read 8 Oct 2026
- Integrations
- Strig can ingest findings from existing tools and capture builds using systems that invoke compiler and linker commands, including Make, CMake, Bazel, Yocto, and Ninja.swarm-security.com · read 8 Oct 2026
- Intended users
- The product is aimed at firmware and embedded software teams, including R&D, DevSecOps, product security, CISO, quality, and compliance roles.swarm-security.com · read 8 Oct 2026
- Not a certification
- Strig says it produces evidence for assessors but does not certify customers.swarm-security.com · read 8 Oct 2026
- Purpose
- Strig monitors firmware builds, records inputs, compile and link events, and outputs, then produces risk findings and signed audit evidence.swarm-security.com · read 8 Oct 2026
- SBOM
- Strig generates CycloneDX SBOMs from compiled source and binaries and flags undeclared components.swarm-security.com · read 8 Oct 2026
- Security and data
- For on-premise and air-gapped scans, the site says Strig blocks its own network access and that no information leaves the environment by design.swarm-security.com · read 8 Oct 2026
- Support
- Customers can request access for a pilot or contact the company to discuss build and compliance requirements.swarm-security.com · read 8 Oct 2026
