Lynx Software Technologies

Lynx Software Technologies traces back to 1988 as Lynx Real-Time Systems, one of the earliest real-time operating system (RTOS) vendors, and went through a rename to LynuxWorks in 2000 before settling on its current name in 2014. Its core technology is LynxSecure, a separation-kernel hypervisor originally built to meet military and aerospace certification requirements (Common Criteria EAL 6+ evaluation history, DO-178C safety certification lineage), which partitions a system into isolated compartments so that a compromise or fault in one component cannot reach others. That architecture — least-privilege, hardware-enforced isolation rather than software-only sandboxing — is the company’s real technical differentiator and the reason it has a decades-long track record supplying avionics, satellite, and defense electronics vendors.

The current commercial product, LYNX MOSA.ic, packages that hypervisor into a modular software framework for building connected embedded systems — UAVs, satellites, industrial controllers — where multiple software components with different trust levels and certification requirements need to coexist on shared hardware. Lynx has extended the platform with MOSA.ic.SCA, a software composition analysis and vulnerability management module that continuously tracks known vulnerabilities in third-party and open-source components used across a customer’s embedded software stack and generates the audit-ready reports that mandates like DO-178C and emerging software-bill-of-materials requirements increasingly demand.

Lynx took a strategic growth investment from OceanSound Partners, a technology-focused private equity firm, in 2022, which points to continued independent operation and expansion capital rather than an acquisition exit. The company’s customer base is concentrated in aerospace, defense, and industrial sectors where certifiable isolation matters most; it does not compete in general enterprise endpoint or network security and its go-to-market is OEM/systems-integrator-style rather than direct enterprise sales.

For CISOs and security architects working in embedded, OT, or mission-critical systems — rather than traditional IT — Lynx’s separation-kernel approach is a genuinely different way to contain the blast radius of a compromised component, backed by real certification history rather than marketing claims about isolation. It is not a fit for organizations looking for a conventional endpoint, network, or cloud security product.