Upstream Security
Upstream Security provides a cloud-based, agentless cybersecurity and data analytics platform for connected vehicles, mobility IoT, and smart mobility infrastructure, serving automotive OEMs, Tier 1 suppliers, EV charging operators, insurers, and government stakeholders with ML-based threat detection, threat intelligence, managed vSOC services, and regulatory compliance support.
- Company typePrivate
- Founded2016
- HeadquartersHerzliya, Israel
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Upstream Security does
Upstream Security is an Israeli cybersecurity company founded in 2016 and headquartered in Herzliya that provides a cloud-based, agentless data management and security platform purpose-built for connected vehicles, mobility IoT devices, and smart mobility infrastructure. The Upstream Platform ingests and normalizes telematics, sensor, API, and IT/OT data streams, then applies ML-based anomaly detection, Live Digital Twin behavioral profiling, and a proprietary Compound Impact Score to deliver near real-time cybersecurity detection and response (Cyber XDR), proactive vehicle quality monitoring, and API security for OWASP API, MCP, and LLM threat categories. Specialized modules include AutoThreat PRO (mobility-specific threat intelligence with deep and dark web monitoring), Ocean AI (GenAI and Agentic AI layer for conversational investigations and automated remediation), and a Managed Vehicle Security Operations Center (vSOC) service that protects millions of vehicles globally. Upstream also offers Cyber Readiness professional services including tabletop exercises, maturity assessments, and stakeholder education.
The company primarily serves automotive OEMs, Tier 1 and 2 suppliers, EV charging operators, fleet operators, automotive insurers, smart city and government stakeholders, and managed security service providers. Customer-validated deployments include Škoda (Volkswagen Group), Ford Otosan, Volvo Group, Marelli, CNH Industrial, Volta Trucks, Automobili Estrema, and chargeIQ, alongside ecosystem references such as Auto-ISAC, CLEPA, and BlackBerry IVY. Strategic investors who are also customers or partners include BMW i Ventures, Mitsui Sumitomo Insurance, Renault, Volvo Group, Hyundai, Nationwide, Salesforce Ventures, and Cisco Investments, indicating strong commercial alignment with the buyer base.
Upstream operates an enterprise SaaS business model combining a subscription platform license (XDR, AutoThreat PRO, API security, and analytics) with a managed vSOC service layer and cyber readiness professional services. Pricing is quote-based with annual billing and is sold through a direct enterprise field sales motion supported by demo and consultation CTAs, SI partnerships with Accenture and Deloitte, and technology partnerships with AWS, Microsoft, Google Cloud, ServiceNow, and Salesforce. Reported platform scale includes 40M+ monitored vehicles and devices, 25 billion real-time data events processed monthly, 40 billion monthly API transactions, and 100 billion total vehicle miles covered; the company holds ISO 9001, ISO 14001, ISO 27001, TISAX (Scope SMN155), GDPR, and CCPA certifications and aligns its platform with UNECE R155/R156 and ISO/SAE 21434.
Upstream Security firmographics
Firmographics- Name
- Upstream Security
- Legal name
- Upstream Security Ltd.
- Website
- https://upstream.auto
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Upstream Security provides a cloud-based, agentless cybersecurity and data analytics platform for connected vehicles, mobility IoT, and smart mobility infrastructure, serving automotive OEMs, Tier 1 suppliers, EV charging operators, insurers, and government stakeholders with ML-based threat detection, threat intelligence, managed vSOC services, and regulatory compliance support.
- Ownership category
- akta.pro rank
Upstream Security industry classification
Industry- Product category
- Automotive Cybersecurity
- NAICS
- Security Systems Services (56162), Computer Systems Design and Related Services (5415), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Security Data Lake, Telemetry Pipelines & Observability Security (HDADAGAH)
- akta.pro secondary industries
- Network Analytics, AIOps & Root-Cause Correlation (HDAFAGAM), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)
Keywords
Where Upstream Security is headquartered
LocationHeadquarters
- HQ city
- Herzliya
- HQ country
- Israel
- HQ region
- Middle East
Offices1 record
Markets served
Upstream Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Platform Subscription/SaaS: Cloud-based platform delivered as subscription service with enterprise licensing. Customers pay for access to the Upstream Platform including cybersecurity XDR, proactive quality detection, API security, and analytics capabilities.
- Managed vSOC Services: Managed Vehicle Security Operations Center service providing dedicated monitoring, investigation and remediation. Offered as professional service complement to platform subscription.
- AutoThreat PRO: Cyber threat intelligence platform available as standalone subscription or API integration. Provides deep/dark web monitoring, vulnerability intelligence, and threat actor analysis.
- Professional Services: Cyber readiness services including tabletop exercises, maturity assessments, stakeholder education, and compliance consulting.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise platform licensing with custom scoping |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels10 records
Upstream Security product offering
Product offeringCore offering
Upstream Security builds and operates a cloud-based, agentless data management and cybersecurity platform for connected vehicles, mobility IoT devices, EV charging infrastructure, and smart mobility applications. It ingests and normalizes telematics, sensor, API, and IT/OT data at scale (25 billion events per month across 40M+ monitored assets), applies ML-based detection and live digital twin profiling to identify cyber and quality anomalies, and exposes those capabilities through platform modules (Cyber XDR, Proactive Quality Detection, Runtime API Security, Advanced Analytics), threat intelligence (AutoThreat PRO), managed vSOC services, and AI-driven investigations (Ocean AI).
Product overview
Upstream Security offers a cloud-based, agentless mobility data platform with multiple integrated modules. The core Upstream Platform ingests and normalizes data from connected vehicles, IoT devices, and mobility applications. Platform applications include Cyber XDR (cybersecurity detection and response), Proactive Quality Detection (vehicle quality monitoring), Runtime AI and API Security (API protection), and Advanced Analytics (business intelligence). The portfolio also includes AutoThreat PRO (threat intelligence), Managed Vehicle SOC (vSOC) services, and Cyber Readiness Services. The platform is powered by Ocean AI for GenAI-driven investigations. Solutions span automotive OEMs, EV charging, insurance, smart cities, and SIM-enabled IoT verticals.
Differentiator
Problem solved
Functional benefit
Brands
- AutoThreat® PRO: Cyber threat intelligence platform providing mobility-specific threat intelligence, vulnerability analysis, and deep/dark web monitoring for automotive and smart mobility stakeholders.
- Ocean AI
- Upstream Platform
Products and services
- Upstream Platform Cloud-based, agentless data management platform that ingests and normalizes data from connected vehicles, IoT devices, and mobility applications to deliver cybersecurity detection and data analytics across the vehicle lifecycle. It is intended for automotive OEMs, tier suppliers, mobility operators, and connected vehicle programs.
- Cyber XDR Cloud-based cybersecurity detection and response (XDR) module for connected vehicles and IoT devices, providing near real-time monitoring, ML-based detection, and GenAI-powered investigations via Ocean AI for SOC analysts and security teams.
- Proactive Quality Detection ML and AI-powered solution for early detection of vehicle component failures and root cause analysis, reducing warranty and recall costs through proactive identification of quality issues across fleets.
- Runtime AI and API Security Discovers and monitors API traffic across mobility services, expanding OWASP API Security Top 10 coverage with fusion detection to mitigate data breaches, business-logic abuse, and operational disruptions.
- Advanced Analytics Application that contextualizes mobility data to deliver actionable insights for insurance, predictive maintenance, and business intelligence across connected vehicle programs.
- AutoThreat PRO Mobility-specific cyber threat intelligence platform providing deep and dark web monitoring, vulnerability intelligence, threat actor engagement, and risk scoring mapped to UNECE R155, MITRE, and Auto-ISAC ATM frameworks.
- Managed Vehicle SOC (vSOC) Managed Security Operations Center service protecting vehicles and mobility applications through expert monitoring, investigation, and remediation across the entire connected mobility ecosystem.
- Cyber Readiness Services Professional services program offering tabletop exercises, maturity assessments, stakeholder education, and compliance consulting to prepare organizations for automotive and smart mobility cybersecurity events.
- SIM-enabled Mobility IoT Security Security solution for SIM-enabled IoT devices in mobility and transportation, monitoring for operational availability, data protection, and SIM-related threats across connected device fleets.
- EV Charging Infrastructure Security Cybersecurity solution for electric vehicle charging stations and infrastructure, protecting against threats to charge points, stations, EVs, electric fleets, and back-office systems.
- Predictive Maintenance Data-driven predictive maintenance solution that uses telematics data and ML models to predict component failures and optimize fleet maintenance scheduling.
- Ocean AI GenAI and agentic AI layer powering investigations, conversational querying, alert filtering, prioritization, pattern identification, and automated response across the Upstream Platform for cybersecurity analysts and SOC teams.
- Insurance Solutions Vertical solution for automotive and mobility insurers enabling Pay-How-You-Drive policies, FNOL optimization, stolen vehicle tracking, and threat intelligence using connected vehicle data.
- Smart Cities and Government Solutions Cybersecurity and data analytics solution for smart city mobility infrastructure including shared mobility, traffic systems, and public transportation assets.
Quantifiable outcome
- 30% acceleration in vehicle quality issue resolution
- +4 more outcomes
Companies that use Upstream Security
Customer profileNamed customers12 records
Segments9 records
Ideal customer profiles5 records
Upstream Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability8 records
Feature10 records
Upstream Security partnerships and signals
Strategic signalPartnerships
17 partnerships are on record, tiered core and minor.
- Škoda (Volkswagen Group)corePartnership to consolidate cyber threat intelligence and risk information into a single environment across Škoda's connected vehicles, digital services, and supporting systems. Streamlines compliance with UN Regulation 155 (R155).
- Mitsui Sumitomo Insurance (MSI)coreStrategic partnership and capital investment led by MSI to enhance Upstream's cloud-based mobility cybersecurity and data analytics platform. Partnership aims to revolutionize car insurance industry by leveraging connected vehicle data for improved risk management and customer experience.
- Amazon Web Services (AWS)coreTechnology partnership with AWS to enhance automotive cybersecurity offerings. Upstream has achieved AWS Automotive Competency designation and collaborates on connected vehicle solutions.
- Google Cloud PlatformcoreCloud platform partnership providing infrastructure for Upstream's cloud-based mobility cybersecurity and data analytics platform.
- MicrosoftcoreCollaboration with Microsoft to deliver secured connected vehicle solutions. Integration with Microsoft cloud and enterprise platforms for automotive cybersecurity.
- FujitsucorePartnership between Fujitsu and Upstream Security for vehicle security collaboration, combining Fujitsu's technology with Upstream's automotive cybersecurity platform.
- VolvocoreCollaboration with Volvo for safer connected vehicles through cybersecurity monitoring and anomaly detection on Volvo's fleet.
- Ford Trucks (Ford Otosan)coreCollaboration to protect connected vehicles against cybersecurity risks and support UNECE R155 compliance efforts for Ford's fleet.
- BlackBerry (IVY)coreCollaboration with BlackBerry IVY platform to provide cybersecurity for connected vehicles using BlackBerry's vehicle data platform.
- May MobilityminorPartnership to safeguard autonomous vehicle technology for May Mobility's robotaxi and autonomous shuttle operations.
- AccentureminorAccenture listed as partner, likely for implementation and consulting services around Upstream's cybersecurity platform.
- DeloitteminorDeloitte listed as partner, potentially for consulting and implementation services in automotive cybersecurity.
- MarellicoreMarelli selected Upstream's AutoThreat PRO cyber threat intelligence solution to protect vehicle components from cyber threats and enable customers to develop safer connected vehicles.
- Canopy SecurityminorCanopy selected Upstream to safeguard its vehicle IoT security systems, leveraging Upstream's expertise in connected vehicle cybersecurity.
- chargeIQminorStrategic partnership to safeguard chargeIQ's platform against malicious attacks targeting charge points, stations, EVs and electric fleets.
- CLEPAminorMembership in CLEPA (European Association of Automotive Suppliers) bringing cybersecurity expertise to software-defined vehicles and digital mobility services community.
- Auto-ISACcoreStrategic partnership with Auto-ISAC to increase visibility and situational awareness of automotive threat landscape.
Scale indicators6 records
Recent moves6 records
Expansion highlights7 records
Upstream Security competitors and assessment
Company assessmentDirect peers
- Karamba Security: Israeli automotive cybersecurity company specializing in ECU-level protection and connected vehicle security. Competes with Upstream in OEM and Tier 1 cyber accounts, with overlapping product overlap in anomaly detection and compliance tooling.
- Cybellum (LG Electronics): Automotive vulnerability management and risk assessment platform, acquired by LG Electronics. Comparable in automotive vulnerability intelligence and SBOM-based risk scoring — overlapping with Upstream's AutoThreat PRO and Compound Impact Score offerings.
- C2A Security: Israel-based automotive cybersecurity company focused on software-defined vehicle (SDV) lifecycle security, including vulnerability management and compliance with ISO/SAE 21434. Comparable as a domain-specialist vendor targeting OEMs on regulatory compliance and development-time security.
- Argus Cyber Security: Israel-based automotive cybersecurity company (acquired by Continental in 2017) offering in-vehicle and off-vehicle cyber solutions. Closely comparable as a pure-play vehicle security vendor with deep OEM relationships, competing directly for the same RFPs at European OEMs.
- GuardKnox: Israeli high-performance automotive cyber company delivering in-vehicle and off-vehicle security for connected vehicles. Competes in the same OEM Tier 1 space, with adjacent but distinctive positioning (more in-vehicle vs. Upstream's cloud-first agentless approach).
- SafeRide Technologies: Israeli automotive cyber company providing network intrusion detection, XDR, and post-quantum security for connected vehicles. Smaller scale direct competitor with overlapping AI/ML-based anomaly detection capabilities.
- VicOne (Trend Micro): Automotive cybersecurity subsidiary of Trend Micro providing VSOC, XDR, and threat intelligence for connected vehicles. Direct competitor in the cloud-based vehicle security operations space and one of Upstream's primary named competitors in OEM RFPs.
Broad incumbents
- Harman International (Samsung): Mass-market Tier 1 connected car supplier with embedded cybersecurity and Ignite cloud platform. Competes indirectly through bundled security offerings inside larger infotainment/telematics deals, with significantly more resources but less mobility-specific depth.
- Cisco (IoT Security / Cyber Vision): Broad networking and security incumbent with IoT/OT security offerings and a venture investment in Upstream. Competes indirectly through enterprise security platforms that touch manufacturing OT environments, and could bundle mobility cyber capabilities.
- Microsoft (Azure IoT & Defender for IoT): Cloud hyperscaler with connected vehicle reference architectures (AVM) and IoT/OT security portfolio. Competes indirectly as a potential bundled option for OEMs already standardizing on Azure, and is an explicit Upstream technology partner.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key highlights7 records
Customer concentration
Upstream Security social profiles
Digital presenceUpstream Security compliance and trust
Trust signalCompliance7 records
Upstream Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Upstream Security leadership team
Management profileNumber of profiles
Profiles15 records
Upstream Security funding detail
Funding detailFunding overview
Funding rounds8 records
Investors17 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Upstream Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Upstream Security
What does Upstream Security do?
Upstream Security builds and operates a cloud-based, agentless data management and cybersecurity platform for connected vehicles, mobility IoT devices, EV charging infrastructure, and smart mobility applications. It ingests and normalizes telematics, sensor, API, and IT/OT data at scale (25 billion events per month across 40M+ monitored assets), applies ML-based detection and live digital twin profiling to identify cyber and quality anomalies, and exposes those capabilities through platform modules (Cyber XDR, Proactive Quality Detection, Runtime API Security, Advanced Analytics), threat intelligence (AutoThreat PRO), managed vSOC services, and AI-driven investigations (Ocean AI).
Is Upstream Security a public or private company?
Upstream Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Upstream Security founded?
Upstream Security was founded in 2016. It employs 101 to 250 people.
Where is Upstream Security based?
Upstream Security is headquartered in Herzliya, Israel, in the Middle East region.
How does Upstream Security make money?
Four revenue lines are on record. Platform Subscription/SaaS are the primary driver. The others are managed vSOC Services, autoThreat PRO and professional Services.
Who are Upstream Security's main competitors?
Direct peers on record are Karamba Security, Cybellum (LG Electronics), C2A Security, Argus Cyber Security, GuardKnox, SafeRide Technologies and VicOne (Trend Micro). Broad incumbents are Harman International (Samsung), Cisco (IoT Security / Cyber Vision) and Microsoft (Azure IoT & Defender for IoT).
Does Upstream Security have an API?
No public API is recorded for Upstream Security.
What industry is Upstream Security in?
Upstream Security's product category is Automotive Cybersecurity. Its primary akta.pro industry code is HDADAGAH, Security Data Lake, Telemetry Pipelines & Observability Security, with a secondary code of HDAFAGAM, Network Analytics, AIOps & Root-Cause Correlation. Its NAICS code is 56162 and its SIC code is 7370.