Software platform for building SBOMs, tracking vulnerabilities and producing ISO 21434 and R155 evidence for vehicle firmware.
- Categories
- Automotive cybersecurity, Software supply chain and SBOM, Vulnerability management, IoT, embedded and product security
- Based in
- Tel Aviv-Yafo, Israel
- Founded
- 2016
- Ownership
- Owned by LG since 2021
About Cybellum
Cybellum provides a product security platform for device manufacturers. It helps them keep connected products secure and compliant. The platform covers the entire product security workflow, from design to post-production. It is used by teams in automotive, medical, and industrial sectors. The platform includes modules for SBOM and asset management, vulnerability management, risk management, compliance, and incident response. It uses Cyber Digital Twins technology, which creates digital replicas of device firmware for analysis. This allows manufacturers to uncover software composition, assess risks, and manage mitigation. The platform is agentless and integrates with existing development tools. Cybellum also offers professional and managed services. These include SBOM analysis, vulnerability management, incident response, and deployment customisation. The services combine automation, AI, and human experts to support product security processes at scale.
Products
- Product Security PlatformA platform that manages the entire product security workflow for device manufacturers.
- Cyber Digital TwinsDigital replicas of device firmware that enable detailed cybersecurity analysis.
- SBOM & Asset ManagementCreates and manages complete SBOMs and assets from multiple sources.
- Assurance & Vulnerability ManagementDetects and triages product risks and vulnerabilities, integrating with threat models and tests.
- Product Risk ManagementProvides a central dashboard to surface critical issues for product security governance.
- Product Cyber ComplianceAutomates evidence creation for regulatory submissions such as FDA PMA and ISO 21434.
Ownership and deals
- LG acquired Cybellum for $240mReport on LG buying Cybellum (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.