CIQ and Binarly Partner to Strengthen Binary and Firmware Security in Enterprise Linux

CIQ, the commercial sponsor of Rocky Linux, has announced a strategic partnership with Binarly to extend binary level analysis and firmware vulnerability detection into Enterprise Linux environments, according to a press release.

Binarly's Transparency Platform performs binary analysis of firmware, boot components, baseboard management controllers, and vendor supplied binaries without requiring source code. It identifies vulnerabilities beneath the operating system that are not covered by standard package scanning tools. Combined with CIQ's hardened Enterprise Linux platform, the integration provides a unified path to infrastructure assurance across both the OS and lower system layers.

The collaboration enhances audit readiness by combining CIQ's OS level compliance data and FIPS 140-3 validated components with Binarly's software bill of materials generation and dependency mapping. This supports security teams in documenting supply chain diligence for auditors and regulators.

The partnership also introduces structured remediation workflows. Binarly's platform supplies actionable context and prioritization for binary level risks, while CIQ's enterprise support model enables organizations to apply fixes in production. Integration milestones across CIQ's product portfolio are currently under development, with further availability details to follow.