Facts

Zyberum at a glance.

The same plain statements we give to search engines and AI assistants, so you get the facts from the source.

What is Zyberum?: Zyberum GmbH is a cybersecurity company from Hannover, Germany. Its engineers test and secure connected products, vehicles, industrial systems and business IT: penetration testing, fuzzing, hardware analysis, compliance consulting and a managed SOC.
Who is it for?: Manufacturers of connected devices and machines, automotive OEMs and suppliers, operators of industrial plants, and small and medium-sized businesses that need security testing, compliance support or 24/7 monitoring. Based in Germany, working worldwide.
What does Zyberum do?: Penetration tests of IoT devices, ECUs and vehicles, OT systems, web applications, cloud environments and mobile apps. Fuzzing of CAN, UDS, DoIP and SOME/IP interfaces. Hardware analysis (UART, JTAG, firmware extraction, secure boot). TARA and work products for ISO/SAE 21434 and UN R155. Gap analyses and implementation support for the Cyber Resilience Act, NIS2, IEC 62443 and EN 18031. Secure coding training and code review. The Zyberdome managed SOC. The AutoST automated ECU security testing suite.
What does Zyberum not do?: Zyberum is not a certification body and does not issue certificates or type approvals. It does not sell firewalls, antivirus or other security products of third parties. It does not run illegal tests: every test needs a written authorisation from the system owner.
How does an engagement start?: With a free call (15 minutes) or a free one-hour consultation. After the call you get a fixed-price offer. Zyberum replies to enquiries within one business day and signs an NDA on request.
What does it cost?: Prices depend on scope and are quoted fixed-price after a scoping call. Typical ranges per test type are published on the pentest cost page. Zyberdome, the managed SOC, has public monthly prices per device, excluding VAT.
Who is behind it?: Zyberum GmbH, Jägerstieg 12, 30657 Hannover, Germany. Founded in 2019 by Tom Zaubermann, former lead of the InCar Security Testing Lab at Volkswagen AG. Certifications: OSCP, Automotive Cybersecurity Level 1 & 2, ISO/IEC 27001 Auditor, CRA Auditor, CCISO.
How does Zyberum use AI?: Self-hosted AI models support the testers, for example when triaging findings and drafting reports. Nothing from a customer project is sent to an online AI service. The models run on Zyberum infrastructure.
Contact: info@zyberum.com, +49 176 439 17074. Vulnerability reports: soc@zyberum.com (see /.well-known/security.txt).