Quokka Launches Q-firm to Help Telcos and Android Device Manufacturers Secure Firmware Before Devices Ship
https://finance.yahoo.com/news/quokka-launches-q-firm-help-120000003.html
Publish Date: 2026-03-10 08:00:00
Source Domain: finance.yahoo.com
SAN JOSE, CA / ACCESS Newswire / March 10, 2026 / Quokka, a leader in mobile app risk and security, today announced the launch of Q-firm, a firmware security analysis tool designed to help telecommunications providers and Android device manufacturers ensure that every device released to market is secure, free from vulnerabilities, and aligned with industry standards.
Android devices ship with complex firmware images that often contain hundreds of pre-installed and system-level applications, including privileged apps that users never see but attackers actively target. Teams can pour enormous effort into building device functionality, but one serious security flaw can render all of it irrelevant.
Q-firm is being introduced to address a growing market issue. In February 2026, a firmware-level Android backdoor known as “Keenadu” was discovered pre-installed on new devices, highlighting how vulnerabilities or malicious components embedded in firmware can reach end users before a device is ever powered on. Incidents like this underscore why secure development calls for identifying and remediating vulnerabilities in embedded and third-party components before devices ship.
Q-firm addresses this gap by providing automated, multi-layered firmware security analysis across pre-installed, hidden, and privileged Android applications embedded within device firmware. Q-firm’s unique flow-based vulnerability scanning applies AI-powered static, dynamic, interactive, and forced-path execution analysis techniques, combined with expert review, to uncover insecure interfaces, embedded libraries with unknown vulnerabilities, escalation-of-privilege paths, privacy leaks, and behaviors that could enable real-world abuse.
“End users expect mobile devices to be secure out of the box, but with the evolving threat landscape, that is no longer a reality,” said Nikolaos Kiourtis, CTO at Quokka. “Q-firm gives manufacturers and service providers security validation from a…
