Hands-on
Real testing on real systems. Our recommendations come from exploitation, not checklists.
About us
We use our powers for good.
We are hackers, engineers and tinkerers who like to find out how things break. We do it for companies that build vehicles, machines and connected products, and for the businesses next door, so the wrong people never get there first.
In short
Zyberum GmbH is a cybersecurity company from Hannover, Germany, founded in 2019 by Tom Zaubermann, who previously led the InCar Security Testing Lab at Volkswagen AG. The team performs hands-on penetration tests of IoT devices, vehicles, industrial systems and IT, develops the AutoST automotive security testing suite and runs the Zyberdome managed SOC. Certifications include OSCP, the SAE and TÜV SÜD Automotive Cybersecurity Certification for ISO/SAE 21434, and ISO/IEC 27001 and CRA auditor qualifications.
Founder
Meet Tom, the person you will talk to
Tom Zaubermann founded Zyberum in 2019. Before that he led the InCar Security Testing Lab at Volkswagen AG, where his work was pentesting ECUs and building security into their development. He has also been a CISO and an IT security consultant, on projects around the world.
He still does what he started with: taking systems apart to see how they break. He speaks about secure coding, API security and car hacking at conferences and meetups such as HITB, code.talks and DevCon, and has written for JAVAPRO and 2600: The Hacker Quarterly.
- Founder & CEO of Zyberum since 2019
- Former lead of the InCar Security Testing Lab at Volkswagen AG
- Co-founder of Luchs Security GmbH
- Speaks English and German
Who we are
Real tech, real attacks, real fixes
Our team has worked in security for more than 15 years, for large automotive and healthcare corporations and for small companies that deserve the same level of protection.
We are researchers at heart. We break things to understand them, build tools like AutoST to automate what we learn, and pass it on in trainings and talks. What you will not get from us is a thick report that nobody reads.
Credentials
Certified where it counts
Certificates do not find vulnerabilities, people do. These are the ones our customers ask for.
OSCP
Offensive Security Certified Professional
OffSec
Automotive Cybersecurity Level 1 & 2
Automotive Cybersecurity Certification for ISO/SAE 21434
SAE International · TÜV SÜD
ISO/IEC 27001 Auditor
Information security management systems
CRA Auditor
EU Cyber Resilience Act
CCISO
Certified Chief Information Security Officer
Technion
On stage and in print
Talks, podcasts and publications
We share what we learn. A selection of Tom’s public work.
Pressing play loads the video from YouTube.
- Tom Zaubermann & The Cyber Threat(s) To Your CarPodcast · The Next Byte Podcast by Wevolver, episode 2092025
- API Security: Divide & ConquerTalk · code.talks 2022, Hamburg2022
- API Security: Divide & Conquer (OWASP API Top 10 with live abuse demo)Talk · Google Developer Group Hannover2024
- Alles, was Sie zu API-Sicherheit wissen müssenVideo · Insider Research2021
- Java, aber sicherArticle · JAVAPRO2019
- Password Cracking in the Modern AgeArticle · 2600: The Hacker Quarterly2015
Values
What we stand for
Honest
Clear findings and fair prices. If you don’t need something, we tell you.
Partnership
We stay until the issue is fixed and work alongside your engineers, not above them.
Trusted by engineering teams at
Get started
Let’s secure what you build
Tell us about your product or environment and we find the right approach together.
- You speak with a security engineer, not a sales rep
- Free and without obligation
- NDA on request
Your call is withTom ZaubermannFounder & CEO, Zyberum
Or send us a message
We reply within one business day.