diff --git a/Kconfig.zephyr b/Kconfig.zephyr
index c45a2402a5..e7b6ade16c 100644
--- a/Kconfig.zephyr
+++ b/Kconfig.zephyr
@@ -630,6 +630,12 @@ config WARN_EXPERIMENTAL
 	  Print a warning when the Kconfig tree is parsed if any experimental
 	  features are enabled.
 
+config TAINT
+	bool
+	help
+	  Symbol that must be selected by a feature or module if the Zephyr
+	  build is considered tainted.
+
 config ENFORCE_ZEPHYR_STDINT
 	bool
 	prompt "Enforce Zephyr convention for stdint"
diff --git a/modules/Kconfig b/modules/Kconfig
index 220f2d657a..3f046ed1e3 100644
--- a/modules/Kconfig
+++ b/modules/Kconfig
@@ -1,6 +1,13 @@
 # Copyright (c) 2019 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 
+config TAINT_BLOBS
+	bool
+	select TAINT
+	help
+	  This option is selected when binary blobs are present locally at
+	  build time to reflect that the build might have been tainted by them.
+
 comment "Available modules."
 
 osource "$(KCONFIG_BINARY_DIR)/Kconfig.modules"