What BG Networks does

BG Networks, Inc. is a Weston, Massachusetts-based IoT cybersecurity software company founded in 2020 by Colin Duggan (former Analog Devices Director of Automotive Cybersecurity), Dr. Roman Lysecky (Professor Emeritus, University of Arizona), and Dr. Jerzy Rozenblit (Distinguished Professor, University of Arizona). The company targets automotive OEMs, Tier-1 suppliers, and medical device manufacturers that must comply with FDA Section 524B, EU CRA, ISO/SAE 21434, and UNECE R155, providing an integrated portfolio of security automation tools and compliance consulting. The company's headcount is in the 11-50 range, and it closed a single $4.5 million seed round led by Boston Seed Capital in March 2023.

The product portfolio is built around five core technologies: AITHRA, an LLM-powered threat modeling and risk assessment platform that generates EU CRA, FDA, MDR, and UN R155 compliance artifacts from text and image inputs; AnCyR, a patent-pending host-based ML intrusion detection system ported to ARM Cortex-M33 microcontrollers and Zephyr RTOS with sub-second detection latency; CRATE, a remote penetration testing and bug bounty platform with multiple hardware configurations (CRATE-6X, CRATE-M, CRATE-H); BGN-SAT, a GUI-based security automation tool for implementing secure boot, root of trust, key management, and OTA updates on NXP i.MX platforms; and SPDF, a Secure Product Development Framework documentation package with FDA premarket submission templates aligned to IEC 81001-5-1 and AAMI SW96. Vulnerability scanning and SBOM generation are automated via integration with OWASP Dependency Track and the NIST NVD.

The business model combines one-time software licenses (BGN-SAT, CRATE hardware), recurring SaaS subscriptions (Aithra platform), licensing of detection IP (AnCyR), and high-touch professional services for FDA, EU CRA, and ISO/SAE 21434 compliance engagements sold on multi-year contracts. Go-to-market is sales-led with direct enterprise engagement, supported by channel partnerships with Tier-1 silicon vendors (Analog Devices, NXP, Infineon), TEE/security specialists (Trustonic, ISS/Green Hills), test automation (Dissecto), and consulting firms (CyberMoxie). Marketing is heavily content-driven, anchored on regulatory white papers, webinars, and instructor-led cybersecurity workshops targeting embedded engineers, compliance officers, and product managers in regulated verticals.

Name

BG Networks

Legal name

BG Networks, Inc.

Website

https://bgnetworks.com

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

1–10 employees

Short description

BG Networks provides AI-powered IoT cybersecurity automation tools and regulatory compliance services for automotive OEMs and medical device manufacturers, covering threat modeling, intrusion detection, secure boot, and FDA/EU CRA/ISO 21434 documentation workflows.

Ownership category

akta.pro rank

Product category

IoT Cybersecurity Software

NAICS

Computer Systems Design and Related Services (5415), Security Systems Services (56162), Investigation and Security Services (5616)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

akta.pro secondary industries

Vulnerability Management, Pen Testing & Attack Surface Management (ASM) (HLACAJAN), Software Supply Chain & Dependency Security (SBOM, Signing) (HDADACAD)

Keywords

• IoT cybersecurity software
• Embedded device security
• Threat modeling automation
• Medical device compliance
• Automotive cybersecurity consulting

Headquarters

HQ city

Weston

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Security Automation Software Tools: Sales of software tools including BGN-SAT, CRATE hardware platforms, and vulnerability scanning tools. Tools are sold as one-time licenses or potentially subscription access.
2. Cybersecurity Consulting & Engineering Services: IoT cybersecurity engineering services including threat and risk assessments, security assessments, secure embedded software development, penetration testing, and compliance consulting. Services range from one-time assessments to multi-phase engagements for FDA, ISO/SAE 21434, EU CRA, and other regulatory compliance.
3. AnCyR Anomaly Detection Technology: Host-based intrusion detection software for automotive ECUs and IoT devices, deployed on microcontrollers and microprocessors. Likely sold as a licensing or subscription model for deployment across vehicle/device fleets.
4. Aithra AI Platform Subscription: AI-powered threat modeling and risk assessment platform. The platform offers immediate evaluation access and generates compliance documentation, suggesting a SaaS or subscription model for ongoing use.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels7 records

Core offering

BG Networks provides AI-powered cybersecurity automation software tools and engineering services that help IoT device manufacturers implement security features and meet regulatory compliance. Its software portfolio includes Aithra (AI-driven threat modeling), AnCyR (ML-based intrusion detection for embedded systems), CRATE (remote penetration testing platform with hardware), BGN-SAT (security automation tool for embedded devices), SPDF (documentation framework for FDA premarket submissions), and automated vulnerability scanning. These tools are complemented by consulting services targeting automotive (ISO/SAE 21434, UN R155) and medical device (FDA Section 524B, EU CRA, EU MDR) compliance.

Product overview

BG Networks is an IoT cybersecurity software company offering a comprehensive portfolio of security automation tools and services. Their product line includes: AITHRA (AI-powered threat modeling platform using LLMs), SPDF (documentation framework for regulatory compliance), AnCyR (ML-based intrusion detection system), CRATE (remote penetration testing platform), BGN-SAT (security automation tool), and Vulnerability Scanning (SBOM generation). These products are complemented by consulting services for EU CRA, ISO/SAE 21434, and FDA compliance, plus cybersecurity training workshops. The tools work together to help IoT device manufacturers implement cybersecurity from design through deployment and post-market monitoring.

Differentiator

Problem solved

Functional benefit

Brands

• AITHRA: AI-powered automation tool for threat modeling and risk assessment for EU CRA, FDA, MDR and UN R155 submissions.
• SPDF
• AnCyR
• CRATE
• BGN-SAT

Products and services

• AITHRA AI/LLM-powered threat modeling and risk assessment platform for connected devices that generates complete assessments in minutes using the STRIDE framework. Supports EU CRA, FDA, MDR, and UN R155 compliance documentation including Threat Model, Cybersecurity Risk Assessment, and Requirements documents for eSTAR submissions.
• SPDF (Secure Product Development Framework) Cybersecurity management system documentation package for FDA premarket submissions and EU MDR compliance. Includes an SPDF manual, 25 procedures, and 25 templates (15 required for FDA premarket submissions), based on IEC 81001-5-1 and ANSI/AAMI SW96:2023 standards.
• AnCyR Anomaly Detection and Cyber Resilience Patent-pending host-based intrusion detection and response system for automotive ECUs and IoT devices. First ML-based anomaly detection optimized for embedded systems, combining statistical, probabilistic, and machine learning algorithms to detect zero-day attacks, buffer overflows, code injection, ROP, and denial-of-service attacks in real time with sub-second latency.
• CRATE Collaborative Remote Automated Test Environment Remote penetration testing platform for automotive and medical devices that automates validation, vulnerability, and penetration testing. Available in multiple hardware configurations (CRATE-6X, CRATE-M, CRATE-H, Custom) and supports Ethernet, USB, WiFi, Bluetooth, CAN, and JTAG interfaces, enabling the first true remote bug bounty programs for ECU hardware.
• BGN-SAT Security Automation Tool GUI-based security automation tool that enables engineers to define security profiles and automatically implement customized security solutions for embedded devices. Includes secure boot, hardware root of trust, key generation, secure key storage, encrypted file system, and secure OTA firmware updates, supporting NXP i.MX 6, i.MX 8, and i.MX RT processors with Yocto Linux and Zephyr OS, with a two-week implementation guarantee.
• Vulnerability Scanning Automated SBOM generation and vulnerability scanning service for embedded Linux/Yocto. Generates CycloneDX SBOMs with each build and sends them to OWASP Dependency Track for daily scanning against the NIST National Vulnerability Database.
• AI-Driven EU CRA Compliance Services AI-enabled compliance automation services for the EU Cyber Resilience Act using the Aithra platform, including portfolio classification, Secure Development Lifecycle establishment, automated threat and risk assessments, Annex I gap analyses, conformity documentation generation, and personnel training across six concrete deliverables.
• ISO/SAE 21434 Consulting Services Cybersecurity consulting services for automotive ISO/SAE 21434 compliance, including gap analysis, threat and risk assessments, secure embedded software development, and penetration testing using the CRATE platform.
• FDA Compliance Consulting Services Full range of FDA medical device cybersecurity consulting services, offering seven service engagements ranging from gap assessment to full premarket submission generation, built on an SPDF-based approach compliant with IEC 81001-5-1 and ANSI/AAMI SW96:2023.
• Cybersecurity Workshops Instructor-led workshops covering cybersecurity fundamentals, cryptography, processor security features, and specific regulations (FDA, ISO/SAE 21434, EU CRA, ETSI EN 303 645, NISTIR 8259A, UK PSTI Act), offered in multiple durations from half-day to three-day programs.

Quantifiable outcome

• 10x reduction in time to create threat model and risk assessment
• +6 more outcomes

Named customers1 record

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability8 records

Feature6 records

Partnerships

Seven partnerships are on record, tiered core and minor.

• Analog DevicescoreTechnology or IntegrationAnalog Devices is a world leader in high-performance analog, mixed-signal, and digital signal processing integrated circuits. As a BG Networks partner, ADI provides the semiconductor hardware platforms on which BG Networks' security tools are designed to operate, enabling integration between BG Networks' security automation software and ADI's embedded processors.
• NXP SemiconductorscoreTechnology or IntegrationNXP Semiconductors is the world leader in secure connectivity solutions for embedded applications, driving innovation in automotive, industrial & IoT, mobile, and communication infrastructure markets. BGN-SAT supports NXP i.MX 6, i.MX 8, and i.MX RT processors. NXP provides the semiconductor platform for BG Networks' security implementation.
• InfineoncoreTechnology or IntegrationInfineon designs, develops, manufactures, and markets semiconductor solutions for automotive, industrial, and consumer sectors. BG Networks is listed as an Infineon design partner, providing cybersecurity consulting and services for Infineon-based embedded designs.
• CyberMoxieminorImplementation/ SI/ Consulting PartnerCyberMoxie helps companies develop and enhance cybersecurity programs through consulting services, custom technology development, and security controls deployment including encryption technology and code signing solutions. Acts as a consulting partner for BG Networks in delivering cybersecurity engagements.
• SynerLeapminorStrategic or Co-development PartnerSynerLeap is an innovation growth hub at ABB's Head Office in Västerås, Sweden. Its purpose is to create an ecosystem where ABB can utilize and enable small technology companies to grow and expand globally in industrial automation, robotics, and energy.
• Integrated Computer Solutions (ICS)minorGTM or Marketing PartnerICS supports customers with software development, user experience design, platform and regulatory support. Partner in BG Networks' medical device cybersecurity webinar series, providing expertise in human factors engineering (62366), hazard and risk analysis, and 62304-compliant software development.
• DissectocoreTechnology or IntegrationDissecto provides automation software for CRATE platforms, including over 100 tests for Bluetooth, Automotive Ethernet, DoIP, CAN, ISO-TP, UDS, and scanning. Supports GUI and Linux command line interfaces for test execution with automated report generation.

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Direct peers

• MedCrypt: MedCrypt provides cybersecurity software specifically for connected medical devices, including vulnerability management, SBOM, and FDA premarket submission support. It is the closest direct competitor to BG Networks' medical-device vertical, addressing the same FDA Section 524B-driven buyer with similar automation tooling.
• Cybellum: Cybellum (now part of LG Electronics) offers a product security platform for connected devices that automates SBOM generation, vulnerability management, and compliance documentation — closely paralleling BG Networks' Aithra and Vulnerability Scanning products for automotive, medical, and IoT customers.
• Finite State: Finite State provides SBOM management and vulnerability scanning for connected devices and embedded systems, targeting medical device, industrial, and critical infrastructure manufacturers. It directly overlaps with BG Networks' Vulnerability Scanning and SBOM automation capabilities.
• Karamba Security: Karamba Security delivers embedded cybersecurity for automotive ECUs and IoT devices, including runtime intrusion detection and secure software development tooling. It competes directly with BG Networks' AnCyR IDS and BGN-SAT in the automotive ECU security market.
• Argus Cyber Security: Argus Cyber Security (acquired by Continental) provides in-vehicle and ECU cybersecurity solutions for automotive OEMs and Tier 1s, including intrusion detection, penetration testing, and ISO/SAE 21434 compliance services — directly comparable to BG Networks' automotive offerings.

Emerging players

• RunSafe Security: RunSafe Security provides firmware cybersecurity for embedded and IoT devices, focusing on binary hardening and runtime protection. It is an emerging peer that competes with AnCyR in the runtime intrusion-detection layer of embedded devices.
• Trustonic: Trustonic provides Trusted Execution Environment (TEE) solutions for automotive, mobile, and IoT devices. While not a head-to-head competitor, Trustonic overlaps with BG Networks in the embedded security stack for automotive and medical — and is a documented BG Networks partner in joint webinars.

Broad incumbents

• ETAS: ETAS (a Bosch subsidiary) provides automotive cybersecurity tooling and engineering services for ISO/SAE 21434 compliance, ECU security testing, and embedded software development. It is a scaled incumbent that competes with BG Networks' automotive portfolio within OEM and Tier 1 accounts.
• NCC Group: NCC Group is a global cybersecurity services firm that provides embedded device, IoT, and product security testing, including penetration testing and ISO/SAE 21434 assessments. It overlaps with BG Networks' consulting and CRATE-based penetration testing services at a much larger scale.

Others

• Integrity Security Services (ISS): ISS (a Green Hills Software subsidiary) provides embedded security products and services for medical devices and automotive, including the Secure Platform for Medical addressing FDA Section 524B. It is a technology and ecosystem peer to BG Networks in the medical device cybersecurity space — and a documented webinar co-partner.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/bgnetworks-inc
• Xx.com/BGNetworksIOT

Compliance10 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds1 record

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BG Networks