MOABI – Reverse Engineering Platform for Software Supply Chain Security

Description

MOABI is a sovereign software cybersecurity platform designed for deep technical analysis of binaries without requiring access to source code. It is built around a fully automated analysis pipeline, combining advanced reverse engineering, static and dynamic analysis, and dataflow tracking technologies.

Technically, the platform disassembles and decompiles binary files (ELF, PE, APK, etc.) to reconstruct control flow graphs, identify critical functions, and perform taint analysis to trace how data propagates through the program. In parallel, it leverages symbolic execution to explore complex conditional execution paths, enabling the detection of security flaws that are often missed by traditional static analysis.

MOABI identifies both known vulnerabilities (CVEs) and 0-days, thanks to its ability to model and analyze potential exploit scenarios directly from the binary. It extracts critical security artifacts such as binary hardening indicators (stack cookies, ASLR, RELRO, etc.), hardcoded credentials, use of weak or deprecated cryptographic algorithms, and non-compliant or obsolete development functions.

The platform automatically generates a Software Bill of Materials (SBOM) from the binary, maps associated software licenses, evaluates the overall security and compliance posture, and provides a technical remediation plan. A differential CVE monitoring engine enriches the analysis by tracking newly published vulnerabilities that impact previously scanned binaries—without rescanning.

MOABI is deployable in SaaS, on-premise, or air-gapped environments and supports full integration with CI/CD pipelines, APIs, and standard formats. Designed to scale, the platform can process up to 20 GB of binaries per day, and is suitable for embedded systems, virtualized environments, and containerized applications.

MOABI thus offers a complete, high-performance, and sovereign solution for the technical, regulatory, and security control of the software supply chain.