A. Hendela
Karambit.AI Inc., Virginia, United States
Keywords: safety, software assurance, verification, validation, software deployment velocity
Karambit.AI automates safety and security analysis of mission-critical software, no source code required. We analyze compiled binaries to extract complete behavioral profiles, giving program offices immediate visibility into what software actually does before it's deployed. This applies across the DoD software portfolio: autopilot firmware, weapons systems, C2 platforms, embedded avionics, and vendor-supplied COTS software. We catch the behavioral changes that functional testing misses. In our analysis of PX4 drone autopilot firmware, a routine patch passed every test but our analysis flagged modified safety-critical parameters that reduced margins, a hard-coded command bypassing normal flight transition handling, and a new GPS data injection path that could enable spoofing. Traditional validation is the bottleneck for software deployment speed. Karambit compresses that timeline from weeks to hours, automatically comparing software versions and surfacing only the changes that warrant human attention. The result is faster fielding of updates across mission-critical systems while maintaining safety and security assurance.