Skip to main content
FDIE
Plan

One plan. Scoped to your team.

FDIE Enterprise includes the full platform for smaller manufacturers, midsize teams and larger organisations. Start with one product and a supported release pair. We scope seats, hosting, storage and support to your needs and budget.

How the price is set

Four factors, one quote.

We do not publish a rate card because two firmware programs rarely need the same deployment. Tell us how you work and we return a fixed annual price, invoiced in your region's currency (INR in India, EUR in the EU, USD elsewhere), with no card checkout and no usage surprises.

01

Seats

The number of people who sign in. Analysts, engineers, compliance and procurement all count the same, and roles are yours to assign.

02

Hosting

India or EU or US on Oracle Cloud Infrastructure, agreed in your Order Form. On-premise deployment on request.

03

Storage

How much firmware you keep on the platform. Uploads are unlimited; storage is sized to the images and versions you want to retain.

04

Support

Email SLA as standard. A dedicated account manager, custom SLA with service credits and tighter recovery objectives on a dedicated deployment.

Talk to sales
Everything included

The whole platform, on every contract.

Every organisation has access to the same capabilities. Evidence coverage depends on the image and configuration; the evaluation establishes what works for your product.

Core security analysis

  • CVE detection with CVSS, EPSS and CISA KEV
  • Hardcoded secret and credential detection
  • Binary hardening report (NX, PIE, RELRO, stack canary)
  • 60 deterministic test cases across 9 categories

Threat intelligence

  • YARA content scanning on every extracted file
  • Continuous re-monitoring against new CVEs and KEV updates
  • Hardcoded secret, key and certificate detection

Delta Intelligence

  • Component lineage across analysed releases
  • Known dependency impact and reviewed triage carry-forward
  • FunctionDiff evidence for patch review

Dynamic analysis

  • Bounded emulation for supported targets
  • Supported Linux boot attempts and runtime observations
  • Coverage-guided fuzzing with stated limits
  • Separate static MCU and RTOS component identification

Threat modeling and compliance

  • TARA, EMB3D and the hybrid threat model
  • Assessed-control grades across eleven frameworks
  • Separate CRA disclosure review and evidence package
  • SBOM (CycloneDX, SPDX), CBOM and VEX export

Platform and access

  • Enterprise SSO (OpenID Connect), MFA and email-code sign-in
  • REST API, webhooks, CI/CD integration
  • Admin settings and audit log
  • PDF, JSON and CSV reports, downloadable or emailed
Scoped in your Order Form

What your contract sets.

Seats

Contracted

Everyone who signs in, whatever their role. Add seats mid-term, invoiced pro rata.

Storage

Contracted

Firmware retained on the platform. Uploads are unlimited in count; capacity ceilings are in the FAQ below.

Data region

India or EU or US

Your hosting region is agreed before provisioning.

Deployment

Cloud or on-premise

Shared or dedicated hosting scoped in your Order Form.

Recovery objectives

By deployment

RPO, RTO and covered failure scenarios are agreed in your Order Form. Profile-specific targets and regional-outage limits are described in the Security Addendum.

Audit log retention

1 year

Longer on request.

Support

Email SLA

Dedicated account manager and custom SLA on request.

Evaluation

21-day free trial

Full platform, no payment details, no automatic conversion.

Buying FAQ

How buying FDIE works.

Procurement questions, invoicing, or a DPA request?

[email protected]

Plan & evaluation

How much does FDIE cost?

FDIE has one plan, FDIE Enterprise, and every capability is included in it. The price is a fixed annual amount scoped to four things: the number of seats, where and how it is hosted (India or EU or US, with the deployment arrangement agreed in the Order Form; on-premise on request), how much firmware storage you need, and the support level. Contact sales with a rough picture of your team and fleet and we return a quote in your region's currency: INR for customers in India, EUR in the EU, USD elsewhere. Payment is by bank transfer against the invoice, with a purchase-order reference where needed. There is no card checkout.

Is anything gated behind a higher tier?

No. All capabilities are included: static and dynamic analysis, Delta Intelligence, FunctionDiff and patch review, threat modeling, assessed-control grades across eleven frameworks, separate CRA disclosure review, evidence exports, SSO and API access. Image support and analysis coverage still need qualification.

Is there a free trial?

New customers can evaluate the full platform through a team-arranged 21-day free trial, with no payment details and no automatic paid conversion. We confirm image compatibility, hosting and evaluation scope before arranging access. Dedicated and on-premise deployments use separately agreed, scoped 21-day proof-of-concept terms.

What are the contract terms?

Annual by default, with multi-year agreements available at a discount. Fees are invoiced in advance and are non-refundable after the free trial, as set out in the Refund Policy. You can cancel at any time and access runs to the end of the paid period.

How do I get access today?

Contact us or book a firmware fit check. We review a sample comparison and confirm your image format, release pair, hosting requirements and evaluation goals before arranging access. The full-platform trial lasts 21 days with no card requirement or automatic paid conversion. Dedicated or on-premise evaluations have separately scoped proof-of-concept terms.

Deployment & capacity

How are seats counted?

A seat is a person who can sign in, whatever their role. Roles (super admin, admin, analyst, viewer) are yours to assign inside the platform and do not change the price. Seats can be added mid-term; we invoice the difference pro rata.

Where is my data hosted?

India or EU or US on Oracle Cloud Infrastructure, agreed before your workspace is provisioned. Your Order Form records the hosting region, deployment arrangement and recovery locations. Account data, audit logs, firmware images and analysis results are stored in the agreed region. The exceptions are the same in every deployment and are listed in the DPA: transactional email through Postmark (US), which also carries report files you choose to email unless you connect your own SMTP relay, error traces to Sentry (US), and a geolocation lookup of the sign-in IP. Fully on-premise or air-gapped deployments are available on request.

Unlimited uploads: what are the actual limits?

Upload count is not metered. What is bounded, on the shared deployment: a single image up to 16 GB, uploaded in resumable chunks; one upload in flight per organisation at a time; up to 10 analyses running concurrently per organisation (5 per user); two dynamic-analysis runs per organisation at a time, each covering up to 200 binaries with a 90-second boot window, 5 seconds per emulated binary and up to 12 fuzzing targets at 90 seconds each; 600 API requests per minute per organisation; retained storage as contracted (500 GB unless your Order Form says otherwise); and no expiry on generated reports. Dedicated deployments set their own ceilings in the Order Form. These are engineering limits, not a pricing meter: hitting one queues the work, it does not add to the invoice.

What happens if I need more storage?

Uploads are unlimited; storage is the amount of firmware retained on the platform and is set in your Order Form. When you approach the allowance you are told in the product and can raise it with us at any time. Nothing is deleted without your say.

What are the recovery objectives?

On the India shared-deployment profile, a 24-hour recovery point objective and a 4-hour recovery time objective for a database or compute failure inside the Mumbai region, supported by point-in-time database backups, daily backup copies and a pilot-light standby. For a loss of the whole Mumbai region the picture is narrower today: firmware images and exports are already replicated to Hyderabad, but the database restore still depends on retrieving the Mumbai backup, so we do not commit to a regional-outage RTO until the cross-region database copy described in the Security Addendum is active. A dedicated deployment can carry a 1-hour RPO and RTO, provisioned with hourly backups and a warm standby as part of its Order Form. All of these are contractual objectives only where your Order Form says so.

Next step

Start with one product and two releases.

Review a sample comparison with us. Then scope a supported image pair, hosting requirements and the evidence your team needs to evaluate.

or contact sales

21-day free trial on the full platform. No card, no automatic conversion.