Firmware provenance is the origin, custody, and trustworthiness of the low-level code that runs hardware before the operating system starts and often throughout device operation. It matters because firmware can control boot behavior, power management, sensor logic, and security features, yet it is usually less visible than software on disk.
In cyber security, poor firmware provenance creates risk: a device may arrive with tampered, outdated, or unsigned code, or with no clear way to verify who built it and how it was updated. Attackers target firmware because it can survive OS reinstallations and hide deep in a system. Defenders respond with secure boot, signed updates, hardware root of trust, and inventory checks that confirm firmware sources and versions. In hardware reuse or repurposing, verifying firmware provenance helps ensure the board still behaves as expected and has not been modified outside the trusted supply chain.