What the Company Does

SecureThings works to secure connected and autonomous vehicles against the growing spectrum of cyber risks that accompany advanced vehicle technology. The core mission revolves around enabling manufacturers and operators to build, deploy, and maintain vehicles that are resilient against cyberattacks throughout their operational lifespan.

The company's approach encompasses the full automotive security lifecycle, which typically includes risk assessment during the design and development phases, protection mechanisms embedded within the vehicle, continuous monitoring once vehicles are on the road, and incident response capabilities when threats are detected. This comprehensive coverage reflects the reality that automotive cybersecurity cannot be addressed through a single point solution but instead requires an integrated strategy spanning the entire vehicle lifecycle.

SecureThings also aligns its offerings with the regulatory landscape governing automotive cybersecurity. Regulations and standards such as UNECE WP.29 (specifically the UN Regulation No. 155 on cybersecurity and cybersecurity management systems) and the ISO/SAE 21434 standard for road vehicle cybersecurity engineering have made cybersecurity a mandatory consideration for vehicle manufacturers. SecureThings helps organizations navigate these compliance requirements while building robust security into their products.

Products and Services

Security, Compliance, and Risk Management

SecureThings provides solutions oriented around security compliance and risk management for the automotive sector. This involves helping manufacturers and suppliers assess their cybersecurity posture, identify vulnerabilities, and implement measures to mitigate identified risks. Risk management in the automotive context requires understanding not only traditional IT security concerns but also the safety-critical nature of vehicle systems, where a compromised component could have direct consequences for passenger and road safety.

Threat Analysis and Risk Assessment

A key offering involves threat analysis and risk assessment (TARA), a structured methodology required under ISO/SAE 21434. This process systematically identifies potential threats, evaluates their likelihood and potential impact, and prioritizes security measures accordingly. SecureThings supports organizations in conducting these assessments to meet both regulatory obligations and practical security needs.

In-Vehicle Protection

SecureThings develops protection technologies designed to be deployed within vehicles themselves. These may include intrusion detection and prevention systems that monitor in-vehicle networks such as the Controller Area Network (CAN bus) and other communication channels for anomalous or malicious activity. By embedding protection at the vehicle level, the company aims to detect and respond to threats in real time before they can cause harm.

Vehicle Security Operations Center (VSOC) Capabilities

Continuous monitoring is a central element of modern automotive cybersecurity. SecureThings provides capabilities aligned with the concept of a Vehicle Security Operations Center, enabling fleet operators and manufacturers to monitor their vehicles for security incidents on an ongoing basis. This continuous visibility allows organizations to detect emerging threats across their vehicle fleets and respond appropriately.

Compliance Support Services

Given the complexity of automotive cybersecurity regulations, SecureThings offers services that help organizations achieve and maintain compliance with relevant standards and regulations. This includes support for establishing cybersecurity management systems (CSMS) as required by UNECE WP.29, as well as assistance with the engineering practices mandated by ISO/SAE 21434.

Industry Context

The automotive cybersecurity market has grown substantially as vehicles transition from largely mechanical systems to sophisticated computing platforms on wheels. A modern vehicle may contain dozens or even hundreds of electronic control units running millions of lines of code, along with wireless connectivity for features such as navigation, entertainment, over the air updates, and advanced driver assistance systems. Each of these connected elements represents a potential entry point for attackers.

High-profile demonstrations of vehicle hacking over the past decade have underscored the seriousness of these risks, prompting both industry and regulators to prioritize automotive cybersecurity. Companies like SecureThings have emerged to serve this specialized need, combining expertise in cybersecurity with an understanding of automotive engineering and the regulatory environment.

Target Customers

SecureThings primarily serves stakeholders across the automotive value chain. This includes vehicle manufacturers who must build security into their products from the design stage, tier-one and tier-two suppliers who provide components and systems that must themselves be secure, and fleet operators who need to protect and monitor vehicles in active service. The company's solutions are designed to address the needs of these different participants, each of whom faces distinct but interconnected security challenges.

Summary

SecureThings is a cybersecurity company dedicated to the automotive and mobility sector, offering solutions that span security, compliance, and risk management. By focusing on connected and autonomous vehicles, the company addresses one of the fastest growing and most safety-critical areas within cybersecurity. Its offerings cover the automotive security lifecycle from initial risk assessment and threat analysis through in-vehicle protection and continuous monitoring, all while supporting compliance with the evolving regulatory standards that govern the industry. Through this specialized approach, SecureThings aims to help manufacturers, suppliers, and operators build and maintain vehicles that are trustworthy and resilient in the face of cyber threats.