Local-first firmware analyzer using WebAssembly

Name: Local-first firmware analyzer using WebAssembly
Availability: InStock
Author: asabil

by asabil·Mar 10, 2026·8 points·0 comments

Visit Project View on HN

AI Analysis

●●SolidWizardryBold Bet

Browser-based firmware scanning with zero data transmission beats online upload scanners.

Strengths

•WebAssembly execution means firmware never leaves your machine for genuine privacy.
•Generates SBOM downloads alongside vulnerability and misconfiguration reports.
•No sign-up required with instant access via direct browser execution.

Weaknesses

•Early alpha status with only .tar rootfs archives currently supported.
•Limited to Linux, Android, Zephyr architectures; other firmware types unsupported.

Post Description

Hi HN,

I just wanted to share what I have been working on for the past few months: A firmware analyzer for embedded Linux systems that helps uncovering security issues running entirely in the browser.

This is a very early Alpha. It is going to be rough around the edges. But I think it provides quite a lot of value already.

So please go ahead and drop a firmware (only .tar rootfs archives for now) and try to break it :)