UNECE WP.29-compliant automotive security assessments for ECUs, CAN networks, telematics units, and connected vehicle platforms. 16 automotive CVEs discovered in a single 48-hour AI-assisted sprint.
Request Automotive AuditFrom July 2024, UNECE WP.29 R155 Cybersecurity Management System (CSMS) type approval is mandatory for new vehicle types in many markets. Our assessments produce evidence-grade documentation aligned with ISO 21434 Clause 8 (risk assessment) and Clause 9 (concept phase) requirements.
ECU firmware binary reverse engineering, CAN bus protocol attack surface (UDS diagnostic sessions, J1939, DoIP), firmware over-the-air (FOTA) update integrity, in-vehicle network segmentation, telematics unit security, and V2X communication trust models. We discovered 16 MITRE-assigned automotive CVEs in 48 hours using AI-guided binary analysis — public dataset peak CVSS 10.0.
Beyond point-in-time assessment, our Nora Vision eBPF-based sensor can be deployed in automotive test environments to provide continuous monitoring of in-vehicle network activity, detecting anomalous CAN frames and unauthorized ECU communication during integration testing.
Yes. Our assessments include TARA documentation aligned with ISO 21434 Annex C, covering asset identification, threat scenarios, impact ratings, and feasibility analysis.
We discovered 16 MITRE-assigned automotive CVEs in a single 48-hour sprint using our AI-assisted binary analysis pipeline. Public research dataset peak CVSS is 10.0, covering CAN protocol vulnerabilities, FOTA bypass, and ECU diagnostic access.
Yes. We have experience with both OEM security teams and Tier-1 suppliers, and can adapt our reporting format to match your internal cybersecurity management process.
31 Vulns in 48 Hours — AI-Assisted Automotive Audit Methodology
Singapore-based. Fixed fee, 5–10 business day delivery. AI-assisted pipeline with human expert review.