IoT security companies

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Global testing and certification firm, recognised by the PCI SSC for PTS POI and HSM evaluation, with labs in the UK and China.

Chip IP company licensing automotive-grade hardware security modules, MACsec engines and key provisioning for vehicle chips.

German testing and certification group whose security services include penetration tests, ISO/SAE 21434 certification and UN R155 audits.

Inspection firm that audits carmakers' security management for R155 type approval and certifies suppliers to ISO/SAE 21434.

Vector Informatik provides software, hardware and services for building, testing and operating software-defined systems.

Boutique security consultancy specialising in IoT, SCADA/ICS, embedded systems, and hardware security research with world-renowned researchers.

Vienna-headquartered Austrian cybersecurity consultancy with a prolific Vulnerability Lab research program and deep expertise in IoT and embedded systems security across the DACH region.

Security evaluation lab that penetration tests automotive ECUs and reports findings for UN R155 and ISO/SAE 21434.

Software and services for cyber risk analysis, secure software updates and UNECE R155 and R156 compliance.

Employee-owned research firm testing embedded systems, including vehicle infotainment, telematics units and CAN networks.

Detroit firm offering a vehicle security engineering platform alongside automotive penetration testing and defensive security services.

Hungarian security evaluation lab offering ISO/SAE 21434 gap analysis, CSMS set-up and type-approval support.

Claroty provides cybersecurity for cyber-physical systems in industrial, healthcare, and commercial settings.

UK security consultancy doing threat modelling, training and research for connected vehicles, IoT and mobile products.

Software platform for building SBOMs, tracking vulnerabilities and producing ISO 21434 and R155 evidence for vehicle firmware.

DEKRA is a global provider of testing, inspection and certification services.

Makes automated ECU and vehicle security test tools and hardware, and carries out automotive penetration testing.

Turin firm selling Weseth, a remote platform for automated security and penetration testing of vehicles and devices.

Bosch subsidiary selling ESCRYPT HSM firmware, intrusion detection, risk analysis tools and a managed vehicle SOC.

Korean supplier of ECU security software, security gateways, TARA, testing and R155 and 21434 consulting.

Finite State provides a product security platform for connected devices, automating SBOM generation, vulnerability analysis, and compliance evidence.

Forescout provides a platform for managing cyber risk and mitigating threats across IT, OT, IoT, and IoMT devices.

Guardsquare provides mobile app security through code hardening, testing, and threat monitoring.

Beijing supplier of vehicle security gateways, intrusion detection, HSM firmware, a vehicle SOC platform and compliance consulting.

LegacyMind GmbH provides a firmware security platform that analyses firmware at the binary level.

NetRise analyses compiled software to create an inventory of components and identify supply chain risks.

Nozomi Networks provides OT and IoT security solutions for critical infrastructure, offering asset visibility and threat detection.

Tier 1 supplier selling its VERZEUSE tools for threat analysis, vulnerability triage and runtime protection to carmakers.

Pune security firm testing in-vehicle systems, telematics and EV charging, with a hands-on car hacking course.

Penumbral Labs helps manufacturers prepare connected products for EU Cyber Resilience Act compliance through testing and support.

Israeli automotive security firm selling in-vehicle intrusion detection, theft prevention, fleet monitoring, TARA and penetration testing.

Paris research firm auditing ECUs, ADAS, in-vehicle networks and OTA updates, and selling software protection for ECU firmware.

Generates SBOMs for embedded code and hardens vehicle ECU software against memory-based exploits at runtime.

Sunnyvale and Pune firm selling in-vehicle intrusion detection, vehicle SOC analytics, secure OTA and security assessments.

French security evaluation lab (ITSEF/CESTI) recognised by the PCI SSC for PTS device evaluation, plus EMVCo and Common Criteria.

Dutch security evaluation lab, part of SGS, recognised by the PCI SSC for PTS device evaluation and accredited for EMVCo and Common Criteria.

Onboard monitoring platform that detects cyber and electronic warfare threats on military vehicles, aircraft, ships and trains.

Solcept AG is a Swiss engineering firm based in Wetzikon.

German security lab in Bonn, recognised by the PCI SSC for PTS device evaluation, plus German payment terminal schemes.

Georgia start-up whose TranzSecure service flags cyber attacks, unknown devices and cargo theft across trucking fleets.

TXOne Networks provides operations-first cybersecurity for industrial operational technology environments.

VicOne provides cybersecurity for vehicles and robots, protecting their digital systems from development to operation.

Web-based software that automates vehicle threat analysis and risk assessment, plus vulnerability tracking and consulting.

Spanish vehicle engineering and testing firm offering TARA, UN R155 and R156 gap analysis, and connectivity pentests.

Korean supplier of in-vehicle security software, V2X and Plug&Charge PKI, security testing tools and R155 consulting.

BlackBerry subsidiary providing cryptographic key management, managed PKI and code signing for vehicle supply chains and in-car networks.

Automated fuzz testing for C and C++ code, with an AUTOSAR simulator and support for ISO/SAE 21434 testing.

COSIC provides expertise in digital security and industrial cryptography, conducting research and education.

German automotive software maker offering embedded security software, network intrusion detection and cybersecurity maintenance for vehicles.

Indian engineering firm offering TARA, secure boot, HSM and SecOC integration, IDS work and ECU penetration testing.

Israeli company that detects cyber attacks and tampering on fleet vehicles through CAN bus monitoring.

Runtime protection agent and binary SBOM scanner for vehicle and device firmware, plus TARA and penetration testing.

Keyfactor provides software for managing machine identities and cryptographic keys.

Hungarian trust service provider operating V2X certificate systems for carmakers and road operators in Europe and North America.

ONEKEY provides a platform for product cybersecurity and compliance, automating SBOM analysis, vulnerability detection, and regulatory compliance.

OPSWAT provides cybersecurity solutions to protect critical infrastructure from file-borne and device-borne threats.

Penta Security develops web application firewalls, encryption and authentication products for enterprises and government agencies.

runZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks.

Korean maker of V2X security software, including certificate management servers, vehicle security clients and misbehaviour detection.

Connected vehicle software firm offering OTA updates, data logging and a vehicle security operations centre for fleets.

Upstream Security provides a cybersecurity and intelligence platform for physical AI, vehicles, and smart mobility.

Utimaco provides hardware security modules, encryption, and key management for data protection and critical infrastructure.