Ithaca, NY – September 15, 2026 — GrammaTech, Inc., a leading provider of software assurance and cyber resilience research and industry-leading products, has been awarded $1,491,802.00 in additional funding from DARPA to enhance its REAFFIRM firmware‑analysis and protection technology.
Firmware vulnerabilities are a growing security concern, with Microsoft reporting that 83% of businesses experienced a firmware attack in the last two years. Current cybersecurity tools often fall short because firmware requires specialized analysis techniques and visibility into low‑level system behavior.
REAFFIRM is an integrated toolchain for firmware, the low‑level code that governs hardware device behavior, and automates the unpacking, disassembly, and analysis of firmware images. The toolchain also provides rehosting capabilities that allow firmware to run off its original hardware for scalable testing, AI‑assisted analysis that supports analysts working with stripped or undocumented binaries, and automated SBOM and FBOM generation to identify components and their associated risks.
GrammaTech’s REAFFIRM delivers an end‑to‑end pipeline that turns raw firmware binaries into actionable results. Organizations need this capability because firmware analysis is complex, labor‑intensive, and underserved by traditional security tools. REAFFIRM improves accuracy, boosts efficiency, and automates repetitive tasks, enabling faster and more reliable identification of security risks. By reducing manual workload and key bottlenecks, it helps teams secure OT environments at scale.
Dr. Lucja Kot, CEO at GrammaTech, said: “Operational technology is becoming one of the most targeted layers of critical infrastructure, and firmware sits at the heart of that risk. With REAFFIRM, we’re giving operators the ability to understand, secure, and trust the devices that keep their missions running. Strengthening firmware is no longer optional, it’s essential to defending modern OT environments.”
This material is based upon work supported by the Defense Advanced Research Projects Agency (DARPA) under Contract No. 140D0425C0004. Any opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the Defense Advanced Research Projects Agency (DARPA).
About GrammaTech
GrammaTech helps organizations secure and modernize mission-critical software through advanced technologies for software analysis, binary transformation, cybersecurity automation, vulnerability assessment, AI-enabled software and security analysis, and cyber resilience. Building on decades of research and innovation, GrammaTech works with government and commercial organizations to address some of the most complex challenges in software security and assurance.