What Sternum is
Sternum built some very cool IP around protecting IoT devices, preventing memory attacks to a degree that I haven't seen elsewhere. They've since brought that same technology to the cloud, and will continue to be an innovator here as they expand eBPF detection capabilities. The vendor site is sternumiot.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Sternum covers
Sternum is in the catalog for these capabilities. Categories: SCA. Catalog tags: Nerdy.
How to evaluate Sternum in a security program
Use Sternum as a stack candidate, not as diligence evidence. The oneNorma score for Sternum is 5.3/10 (percentile 57). If the real gap is in SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what sternumiot.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
