Design
Risk assessment & threat modelling
TARA, threat modelling and security concepts while changes are still cheap.
Secure developmentServices
Everything you need to build and run secure systems.
Our services follow your product and business lifecycle: design it securely, build it securely, test it thoroughly, prove compliance and operate it safely.
Along the lifecycle
Our services
Build
Secure development
Secure coding training, code review and DevSecOps for software and firmware teams.
Secure developmentTest
Penetration testing
Hands-on security research on devices, vehicles, industrial systems, applications and infrastructure.
Penetration testingComply
Compliance consulting
CRA, ISO/SAE 21434 & UN R155, IEC 62443 and NIS2: practical implementation instead of paperwork.
CRA complianceOperate
Managed SOC
Zyberdome: endpoint protection, 24/7 monitoring and incident response at a fixed price.
ZyberdomeLearn
Training
Automotive hacking, secure coding and compliance courses, public or in-house.
Training cataloguePenetration testing
Penetration tests for every attack surface
We research products and systems for vulnerabilities and show you how to fix them: CVSS-rated findings, proof-of-concepts and a retest after remediation.
IoT & embedded devices
Hardware, firmware, wireless protocols, apps and cloud backends.
IoT securityVehicles & ECUs
ECUs, gateways, infotainment, telematics and automotive backends.
Automotive securityIndustrial control systems
PLC, HMI, SCADA and DCS, tested safely during maintenance windows.
OT securityIT, web & cloud
Networks, Active Directory, web applications, APIs and cloud tenants.
IT securityCompliance
Regulations and standards we help you meet
Cyber Resilience Act
Hardware and software products with digital elements sold in the EU.
CRA complianceISO/SAE 21434 & UN R155
Vehicle cybersecurity engineering and type approval.
ISO/SAE 21434 consultingIEC 62443
Security for industrial automation and control systems and their components.
IEC 62443NIS2
Risk management and incident reporting for essential and important entities.
NIS2 complianceTrusted by engineering teams at
Get started
Not sure where to start?
Describe your situation in a quick call. We tell you honestly which service makes sense, and which does not.
- Directly with a security engineer
- A concrete recommendation after the call
- Free and without obligation
Your call is withTom ZaubermannFounder & CEO, Zyberum
Or send us a message
We reply within one business day.