Meet Exein Ray.
Ask about your devices, scans and vulnerabilities in plain language.
Ray answers from your own firmware analysis, ranks what to fix first, and never acts without your approval.
A single firmware scan can surface hundreds of findings. Teams lose hours deciding what matters, what to fix first, and how. Ray turns raw findings into a ranked, explained remediation plan, in one conversation.
From question to fix.
Four steps, from the moment you ask to the moment you act. Ray lives inside Exein Analyzer, so you never leave the page you’re on.
- Step 1 of 401 · Ask
Ask in plain language.From anywhere in Analyzer.
Type a question or pick a suggested prompt: on Objects Overview for the whole fleet, or on any device’s Object Details page.
Try“What should I fix first?” - Step 2 of 402 · Ray reasons
Ray reads your scan data.Not generic advice.
Ray grounds its answer in your own Analyzer results for that scope: CVEs, credentials, capabilities, hardening, kernel and malware.
ScopeThe whole fleet, or one device when you ask from its page. - Step 3 of 403 · Confirm
Actions wait for you.Every time.
If the request involves an action, like creating or deleting an object, Ray proposes it on a confirmation card and waits for your approval.
SafetyPermanent deletes need an extra acknowledgement. - Step 4 of 404 · Result
A structured answer.Or the action, applied.
Answers come as tables and summaries tied to your scan data, with concrete fix steps for the top issue.
NextRate the answer or keep asking. Prompts adapt to what’s on screen.
Create object “Gateway v2.1”?
Nothing changes until you confirm. After that, upload firmware or an SBOM to start a scan.
- Type
- Linux firmware
- Scope
- Objects Overview
Here's what to fix first, ranked by risk across every analysis category.
| # | Finding | Category | Risk |
|---|---|---|---|
| 1 | CVE-2020-25687 · dnsmasq | CVE | Critical |
| 2 | Hard-coded root password | Password Hash | Critical |
| 3 | No stack protector in 14 binaries | Hardening | High |
| 4 | Raw socket capability in busybox | Capabilities | Medium |
Triage speed is now a compliance concern.
Under the EU Cyber Resilience Act, manufacturers must identify and remediate vulnerabilities across a product's lifecycle. Analyzer's Compliance Check maps scan results to CRA requirements, and Ray makes them actionable, with the evidence to back it up.
Know what's in the product
Analyzer builds the SBOM. Ray explains it in plain language.
Find known vulnerabilities
Analyzer finds them. Ray ranks them by real risk.
Fix them without delay
Ray gives concrete fix steps for the top issue.
The details.
Everything you need to know about how Ray fits into your workflow.
- Product type
- Conversational AI security agent, embedded in Exein Analyzer
- Access points
- Objects Overview and Object Details
- Input
- Natural-language questions and suggested prompts
- Output
- Structured tables and summaries, risk-ranked remediation, fix steps
- Data sources
- Your own Analyzer results across all analysis categories
- Supported firmware
- Linux, Docker, IDF (ESP32) images; SBOM upload
- Safety controls
- Confirmation card for every action; extra acknowledgement for permanent deletes
- Source code needed
- No. Binary firmware analysis
- Deployment
- SaaS, through the Exein Analyzer platform