FirmwareDB
Authoritative Apple hardware firmware catalog, 10-subsystem Boot ROM / iBoot / SEP auditor, and Cloudflare Edge API.
Live Service · v0.2.0
Platforms:
macOS 15.0+iOS & iPadOSUniversal2 (arm64 + x86_64)Cloudflare Edge API
Application Screenshots
Captured on macOSKey Features
- Audits 10 hardware firmware subsystems on local Macs: Boot ROM / iBoot, SMC, Secure Enclave (SEP), System Firmware, OS Loader, DCP, Thunderbolt, Wi-Fi, Bluetooth, and NVMe
- Tracks ecosystem peripherals and Bluetooth accessories alongside imported CSV/JSON hardware inventories
- Cross-references running firmware versions against the authoritative FirmwareDB catalog to verify currency and signing state
- Provides sub-millisecond IPSW and OTA signing status queries across macOS, iOS, iPadOS, watchOS, tvOS, and visionOS
- Includes SHA-256 checksum verification and direct Apple CDN manifest inspection
- Backed by the public REST API and web portal at firmwaredb.app on Cloudflare Workers
System Requirements
- Operating System
- macOS 15.0 (Sequoia) or later · iOS 18.0+ · Web API at firmwaredb.app
- Architecture
- Universal2 binary (Apple Silicon arm64 & Intel x86_64)
- Code Signing
- Developer ID Application: east coast science, llc (ZU2882L4HT) · Apple Notarized
- Storage & Memory
- 20 MB native app · Edge API accessible globally over HTTPS
- Privacy & Security
- Read-only IOKit hardware introspection · Serial numbers stay local
What's New
v0.2.0 ·- Added 10-subsystem Apple Silicon hardware firmware inspector (Boot ROM/iBoot, SMC, SEP, DCP, Thunderbolt).
- Added Fleet Audit compliance view and CSV/JSON inventory import.
- Added macOS 27.2 and macOS 26.7 firmware catalog baselines to firmwaredb.app.
- Shipped Universal2 macOS and iOS companion builds.
Apple Hardware Firmware Catalog, Subsystem Auditor & Edge Compliance API
FirmwareDB combines a native macOS and iOS hardware inspection app with the public firmwaredb.app Cloudflare Edge service. It gives systems engineers and security teams deterministic visibility into low-level Apple Silicon and Intel firmware versions across Boot ROM (iBoot), System Management Controller (SMC), Secure Enclave Processor (SEP), Display Coprocessor (DCP), and peripheral controllers.
Capabilities
- 10-Subsystem Local Hardware Introspection: Reads live IOKit and DeviceTree properties without kernel extensions or elevated privileges to report exact running firmware builds.
- IPSW & OTA Signing Ledger: Tracks active Apple signing windows, build manifests, and cryptographic SHA-256 digests across macOS, iOS, iPadOS, and visionOS releases.
- Offline & Cloud Catalog Sync: Audits single workstations or imported fleet CSV inventories against the signed FirmwareDB baseline.