Hello,
We started evaluating a security solution (https://www.sternumiot.com/) that integrates with Zephyr and provides protection of the code including the Zephyr itself against software vulnerabilities like memory overflows, unallowed code execution etc. It shows the alerts from our device on a nice cloud dashboard.

I'm not sure how to evaluate that the solution does what it says it does in terms of security. The visibility part of the Zephyr is pretty impressive but I don't know how to verify that the code is protected. Can you please share with me how you have tested security before or ideas how I can evaluate this?

Thanks,
Ofir