As modern vehicles become more connected, autonomous, and software-driven, the attack surface expands, making cybersecurity a critical priority for OEMs, Tier-1 suppliers, and mobility providers.
PCA Cyber Security specializes in penetration testing, threat intelligence, and Verification & Validation (V&V) services, ensuring compliance with ISO 21434, UNECE R155, and emerging regulations while safeguarding vehicles against cyber threats.
Need expert guidance?
We provide cybersecurity services tailored to connected vehicles, ECUs, and automotive software, ensuring resilience against cyber threats.
Automotive Penetration Testing
Identify and mitigate vulnerabilities in ECUs, MCUs, IVIs, telematics systems, and vehicle networks before they can be exploited.
Automotive Threat Intelligence Services
Get real-time, actionable, automotive product-specific threat intelligence to detect and respond to cyber risks affecting vehicles and embedded systems.
EV Charger Penetration Testing
Identify security flaws in charging stations and infrastructure, protecting both EV users and power grids from cyberattacks.
Automotive Cybersecurity Verification and Validation (V&V)
Ensure compliance, reliability, and cybersecurity with rigorous testing of automotive systems to meet industry standards like ISO 21434 and UNECE R155.
Hardware Prototype Audit
Assess the security of pre-production hardware to prevent design flaws that could lead to future cyber risks.
Need a tailored Automotive security solution?
PCA CERVUS
Explore how PCA CERVUS brings product context, device-centric threat intelligence and continuous vulnerability monitoring together to help you make security decisions with confidence.
Want to see how our security services can help?
We work with a wide range of companies across various industries, such as automotive, energy, financial services, and more.
PCA Cyber Security team was awarded a significant $55,200 prize at the prestigious Pwn2Own Automotive competition, in Tokyo on January 21-23, 2025. The team completed the competition with 3 successful exploits across key targets:
Cyber threats in the automotive industry are evolving rapidly. Ensuring your vehicles, components, and connected systems are secure and compliant is critical to protecting customers, brands, and business operations.
Ready to strengthen your automotive cybersecurity?
Zero-day
vulnerabilities
We have proven track record in identifying zero-day, uncovered critical vulnerabilities in top automotive brands.
World-Class
advanced research
Advanced expertise in automotive penetration testing and threat intelligence. Exceptional in-house toolset and personnel (CyberLab, CyberGarage).
Professional
Recognition
TISAX ® Assessment Level 3 certified. Prize winners at Pwn2Own Automotive (Tokyo 2024, 2025).
Regulatory
Compliance
Aligning with ISO 21434, UNECE R155, and industry best practices
"We can recommend PCA Cyber Security for their professional penetration testing service."
| Affected Products | CVES |
|---|---|
| OpenSynergy Blue SDK Bluetooth stack | |
| Nissan infotainment system by BOSCH | |
| KEO EEBUS Library | PCA_KEO_001 |
| Alpine Halo9 Infotainment Unit | |
| Enel X JuiceBox (Waybox) Pro & Plus 3.0 charger | |
| Volkswagen MIB3 Infotainment Unit |
Alpine
iLX-507 IVI
Achieved code execution via a stack-based buffer overflow.
Sony
XAV-AX8500 IVI
Exploited by chaining 3 bugs (heap overflow, authentication bypass, improper isolation) with 0 clicks.
Tesla
Wall Connector
Successfully exploited, took control over the charger and manipulated it, despite a previously known bug.