Automotive cybersecurity companies

Chip IP company licensing automotive-grade hardware security modules, MACsec engines and key provisioning for vehicle chips.

German testing and certification group whose security services include penetration tests, ISO/SAE 21434 certification and UN R155 audits.

Inspection firm that audits carmakers' security management for R155 type approval and certifies suppliers to ISO/SAE 21434.

German inspection group assessing vehicles and makers against UN R155, R156, ISO/SAE 21434 and ISO 24089.

Vector Informatik provides software, hardware and services for building, testing and operating software-defined systems.

Security evaluation lab that penetration tests automotive ECUs and reports findings for UN R155 and ISO/SAE 21434.

Software and services for cyber risk analysis, secure software updates and UNECE R155 and R156 compliance.

Ettlingen consultancy pentesting vehicles, ADAS, gateways, infotainment and on-board chargers, plus R155 CSMS consulting.

Detroit firm offering a vehicle security engineering platform alongside automotive penetration testing and defensive security services.

UK security consultancy doing threat modelling, training and research for connected vehicles, IoT and mobile products.

Software platform for building SBOMs, tracking vulnerabilities and producing ISO 21434 and R155 evidence for vehicle firmware.

Israeli firm selling in-vehicle intrusion detection, vulnerability tools, compliance software and vehicle SOC services to carmakers.

Makes automated ECU and vehicle security test tools and hardware, and carries out automotive penetration testing.

Turin firm selling Weseth, a remote platform for automated security and penetration testing of vehicles and devices.

Bosch subsidiary selling ESCRYPT HSM firmware, intrusion detection, risk analysis tools and a managed vehicle SOC.

Korean supplier of ECU security software, security gateways, TARA, testing and R155 and 21434 consulting.

Engineering services group whose FEV.io arm runs TARA, ISO 21434 work, secure lab testing and vehicle pentests.

Hardware and software that detect cyber attacks and cargo theft on fleet vehicles, backed by a vehicle SOC.

Beijing firm selling TARA and test software, vehicle test hardware, penetration testing and R155 compliance advice.

UK vehicle engineering and test centre offering threat modelling, CSMS support and security testing for vehicles.

Beijing supplier of vehicle security gateways, intrusion detection, HSM firmware, a vehicle SOC platform and compliance consulting.

US engineering consultancy offering ISO 21434 consulting, TARA, security verification and automotive cybersecurity training.

Tokyo firm assessing vehicle ECUs and connected services, with automotive security consulting, PSIRT support and training.

Tier 1 supplier selling its VERZEUSE tools for threat analysis, vulnerability triage and runtime protection to carmakers.

Israeli automotive security firm selling in-vehicle intrusion detection, theft prevention, fleet monitoring, TARA and penetration testing.

Paris research firm auditing ECUs, ADAS, in-vehicle networks and OTA updates, and selling software protection for ECU firmware.

UK automotive consultancy that runs vehicle penetration tests, threat assessments and anti-theft testing for carmakers.

Sunnyvale and Pune firm selling in-vehicle intrusion detection, vehicle SOC analytics, secure OTA and security assessments.

Georgia start-up whose TranzSecure service flags cyber attacks, unknown devices and cargo theft across trucking fleets.

French test and approval body acting as a UN R155 technical service, with vehicle pentesting and TARA.

VicOne provides cybersecurity for vehicles and robots, protecting their digital systems from development to operation.

Web-based software that automates vehicle threat analysis and risk assessment, plus vulnerability tracking and consulting.

Spanish vehicle engineering and testing firm offering TARA, UN R155 and R156 gap analysis, and connectivity pentests.

Korean supplier of in-vehicle security software, V2X and Plug&Charge PKI, security testing tools and R155 consulting.

Indian consultancy helping vehicle makers gain UN R155, R156 and AIS-189 approval, with TARA tools and penetration testing.

Product security platform for vehicle makers covering TARA, SBOM-based vulnerability management and R155 and ISO 21434 compliance.

German automotive software maker offering embedded security software, network intrusion detection and cybersecurity maintenance for vehicles.

Indian engineering firm offering TARA, secure boot, HSM and SecOC integration, IDS work and ECU penetration testing.

Israeli company that detects cyber attacks and tampering on fleet vehicles through CAN bus monitoring.

Indian firm offering vehicle and ECU penetration testing, R155 and 21434 consulting, plus a vehicle SOC.

Tool for building and updating threat analyses and risk assessments to ISO/SAE 21434, IEC 62443 and the CRA.

Runtime protection agent and binary SBOM scanner for vehicle and device firmware, plus TARA and penetration testing.

Hungarian trust service provider operating V2X certificate systems for carmakers and road operators in Europe and North America.

Browser-based tool that automates threat analysis and risk assessment, mainly for vehicle makers and their suppliers.

Korean maker of V2X security software, including certificate management servers, vehicle security clients and misbehaviour detection.

Jinan company providing connected-vehicle test tools, cyber ranges, vulnerability research and compliance services for carmakers.

Connected vehicle software firm offering OTA updates, data logging and a vehicle security operations centre for fleets.

Upstream Security provides a cybersecurity and intelligence platform for physical AI, vehicles, and smart mobility.

VxLabs provides an AI-powered platform for automotive cybersecurity compliance and risk management.

Test equipment maker whose device security lab, built on Riscure, tests chips, cards and vehicle electronics against side-channel and fault-injection attacks.

Global testing and certification firm, recognised by the PCI SSC for PTS POI and HSM evaluation, with labs in the UK and China.

Global cybersecurity consultancy with CREST, CHECK, and CBEST accreditation, renowned for deep technical research and penetration testing services.

Boutique security consultancy specialising in IoT, SCADA/ICS, embedded systems, and hardware security research with world-renowned researchers.

The UK's largest independent security testing firm, renowned for IoT/OT research, CBEST red teaming, and CHECK/CREST-accredited penetration testing across all sectors.

Offensive security firm founded by former DoD professionals. Combines deep offensive testing with the Chariot attack surface management platform and its Exploit validation engine.

Gothenburg consultancy testing ECUs, vehicle buses, telematics and OTA pipelines, and advising on R155 and ISO 21434.

Employee-owned research firm testing embedded systems, including vehicle infotainment, telematics units and CAN networks.

Black Duck provides application security testing tools for software development.

Bureau Veritas Cybersecurity provides cybersecurity services covering people, processes, and technology.

Hungarian security evaluation lab offering ISO/SAE 21434 gap analysis, CSMS set-up and type-approval support.

DEKRA is a global provider of testing, inspection and certification services.

Bochum software firm hardening embedded and ECU firmware binaries against reverse engineering and exploitation, with ASIL-D certification.

Exein provides runtime cybersecurity for firmware and physical AI systems across connected devices.

Finite State provides a product security platform for connected devices, automating SBOM generation, vulnerability analysis, and compliance evidence.

Fuzzes compiled ECU and embedded firmware in emulation, finding memory bugs without needing the physical hardware.

Michigan security research firm offering penetration testing and training for vehicles and other transport systems.

Testing and certification group that helps vehicle makers and suppliers work towards ISO/SAE 21434 compliance.

Provides a platform for managing cryptographic trust across devices, systems and AI.

Pune security firm testing in-vehicle systems, telematics and EV charging, with a hands-on car hacking course.

Generates SBOMs for embedded code and hardens vehicle ECU software against memory-based exploits at runtime.

Onboard monitoring platform that detects cyber and electronic warfare threats on military vehicles, aircraft, ships and trains.

Solcept AG is a Swiss engineering firm based in Wetzikon.

PikeOS hypervisor maker offering a secure vehicle gateway platform with firewall and IDS, plus a host-based IDS.

Embedded cryptography firm whose wolfHSM ports its crypto library to automotive hardware security modules in ECUs.

Italian Var Group security firm that absorbed Munich automotive consultancy CYRES and offers a vehicle SOC service.

BlackBerry subsidiary providing cryptographic key management, managed PKI and code signing for vehicle supply chains and in-car networks.

Automated fuzz testing for C and C++ code, with an AUTOSAR simulator and support for ISO/SAE 21434 testing.

SBOM and vulnerability management platform that helps carmakers and suppliers track risk in vehicle software.

ONEKEY provides a platform for product cybersecurity and compliance, automating SBOM analysis, vulnerability detection, and regulatory compliance.

Embedded firmware hardening and runtime monitoring for devices, including Symbiote protection for vehicle ECUs and calibration data.

Swiss testing and certification group offering security evaluations, penetration tests and ISO/SAE 21434 audits.