What Drivesec does

Drivesec S.r.l., founded in 2017 and headquartered in Torino, Italy, is a privately held cybersecurity company that builds the Weseth® ecosystem, an integrated hardware-plus-software platform for remote and automated cybersecurity validation, vulnerability assessment, and penetration testing of IoT and connected devices. The core architecture combines the Weseth® Box, a self-installable hardware device enabling secure remote connectivity to devices under test, with a software platform featuring automated test execution, a project-accumulating Knowledge Base of attack simulation scripts, and integrations into CI/CD pipelines and NI Hardware-in-the-Loop systems. The company has been granted two industrial invention patents for Weseth® by the Italian Ministry of Enterprises and Made in Italy (2023 and 2024) and holds ISO 9001 certification.

Drivesec serves automotive OEMs and Tier 1 suppliers as its primary segment, addressing UNECE R155/R156 compliance, TARA-based requirements engineering, and continuous post-market security monitoring, and has expanded its offering into adjacent IoT verticals including home and appliance manufacturers, medical device makers, energy systems providers, and agricultural technology companies facing the EU Cyber Resilience Act and RED Directive (EN 18031). Recent product additions include Weseth® CyberCheck, a ready-to-use automated test suite for RED compliance targeting testing labs and certification bodies, and an AI-based platform that generates CRA documentation (Item Definition, Risk Assessment, Test Plan) from product specifications.

The company operates a sales-led enterprise go-to-market with regional sales managers covering EMEA, North America, and Asia, supplemented by a partner program for Vulnerability Assessment and Penetration Testing service providers, strategic alliances (Auxilium Pentest Labs, American Center for Mobility), and active participation in Auto-ISAC, UNINFO, and the European Cybersecurity Atlas. Revenue is generated through Weseth® platform subscription/licensing combined with professional services such as Security by Design consulting, CRA/RED compliance support, and penetration testing. Total disclosed funding is approximately €3.4 million across seed (2021), follow-on (2022), and Series A (2024), and the company has opened offices in Shanghai, Beijing, Hong Kong, and Birmingham to support international expansion.

Name

Drivesec

Legal name

drivesec S.r.l.

Website

https://drivesec.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

Drivesec is an Italian cybersecurity company that builds the Weseth® hardware-plus-software platform for automated cybersecurity validation, penetration testing, and regulatory compliance (CRA, RED, UNECE R155/R156) for IoT, automotive, and connected device manufacturers globally.

Ownership category

akta.pro rank

Product category

IoT Cybersecurity Testing

NAICS

Computer Systems Design and Related Services (5415), Other Computer Related Services (541519), Custom Computer Programming Services (541511)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Application Security & DevSecOps Services (BPAKAHAJ)

akta.pro secondary industries

DevSecOps & Supply Chain Security (DevOps toolchain security) (BPAEAKAI), Penetration Testing, Red Team & Ethical Hacking (EDAOAIAH)

Keywords

• IoT cybersecurity testing
• Automotive security compliance
• Penetration testing platform
• Vulnerability assessment tools
• Cyber resilience compliance

Headquarters

HQ city

Torino

HQ country

Italy

HQ region

Europe

Offices6 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Supply Chain, Operations, Infrastructure

Revenue model

1. Weseth® Platform Subscription and Licensing: Weseth® is offered as a platform solution that customers access through subscription or licensing arrangements. The platform supports automated cybersecurity testing, remote penetration testing, and compliance validation. Pricing is likely tiered by test volume, device count, or feature access, though specific pricing is not publicly disclosed.
2. Professional Cybersecurity Services: Drivesec provides consulting and professional services including CRA/RED/TARA Compliance support, Security by Design integration, gap analysis, and penetration testing support. These are delivered alongside the Weseth platform or as standalone engagements.
3. Weseth® Automated Test Suite (CyberCheck): Ready-to-use automated test suites aligned with specific standards (e.g., RED/EN 18031, UNECE R155) offered through the Weseth CyberCheck platform, likely on a per-test or subscription basis.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels6 records

Core offering

Drivesec develops and sells the Weseth® ecosystem, a cybersecurity validation platform that enables remote and automated validation of cybersecurity requirements and simulation of digital attacks on IoT devices. The platform combines a proprietary hardware device (Weseth® Box), automated test execution software, a customizable Knowledge Base of attack scripts, and integration with HIL systems and CI/CD pipelines. Complementary sub-products include Weseth® CyberCheck (RED/EN 18031 compliance), Weseth Accesso (secure remote access), Weseth® Proxy, and an AI-based CRA documentation platform, alongside professional services for Security by Design consulting, CRA, RED, and UNECE R155 compliance.

Product overview

Drivesec is a cybersecurity company founded in 2017 offering a platform-plus-modules architecture anchored by the Weseth® ecosystem. The core Weseth® platform enables remote and automated cybersecurity validation for IoT products through a proprietary Weseth® Box hardware device, complemented by specialized sub-products including Weseth Accesso (secure remote access), Weseth® CyberCheck (RED compliance testing), and an AI-based CRA Platform for automated documentation generation. Additional offerings include The Knowledge Base (dynamic test script library), Weseth® Proxy (penetration testing services), and consulting services covering Security by Design, CRA Compliance, RED Compliance, and UNECE R155 Testing Guidelines. The platform supports automotive, energy, medical, and home appliance sectors.

Differentiator

Problem solved

Functional benefit

Brands

• Weseth®: Ecosystem of security solutions designed to support the remote and automated validation of cybersecurity requirements and the simulation of digital attacks.
• Weseth® CyberCheck
• Weseth® Accesso
• Weseth® Proxy
• AI-based CRA Platform

Products and services

• Weseth® Platform Core ecosystem platform enabling remote and automated validation of cybersecurity requirements and the simulation of digital attacks on IoT devices. Provides automated test execution, an intuitive GUI, secure remote penetration testing, and a growing Knowledge Base of attack/simulation scripts. Designed for automotive, IoT, and connected device manufacturers.
• Weseth® Box Proprietary hardware device enabling secure remote connection and control of IoT systems under test. Self-installable within 1 hour without impacting IT infrastructure, supports all interface types, and enables programmable remote checks via Digital I/O management for automated cybersecurity validation and penetration testing.
• Weseth® Accesso Innovative, easy-to-use, fully-configurable, and secure system for granting remote access to critical company resources (servers, databases, legacy systems, manufacturing devices, 3D printers) reachable via TCP/IP. Enables secure diagnostics, assessment, and validation by internal or external users without exposing devices directly to the internet.
• Weseth® CyberCheck Ready-to-use automated test suite aligned with EN 18031 RED cybersecurity requirements. Enables manufacturers, certification bodies, and testing labs to validate wireless and connected devices against regulatory standards through automated testing, streamlining conformity assessments.
• AI-based CRA Platform AI-powered platform that automatically generates CRA (Cyber Resilience Act) compliance documentation — including Item Definition, Risk Assessment, and Test Plan — from product specifications. Reduces effort and cost for manufacturers, external labs, and notified bodies in meeting CRA product regulation requirements.
• Weseth® Proxy Component of the Weseth® ecosystem that supports secure remote execution of penetration testing services, enabling service providers and Drivesec's own team to perform security assessments on customer IoT devices via the Weseth platform.
• Security by Design Consulting Service Professional consulting service supporting IoT system manufacturers and suppliers across the product lifecycle, integrating Security by Design principles into CI/CD processes. Covers Threat Analysis and Risk Assessment (TARA), requirements engineering, and continuous vulnerability monitoring.
• CRA Compliance Services End-to-end consulting and compliance support service for the EU Cyber Resilience Act, including product classification, vulnerability management systems design, and ongoing compliance maintenance for manufacturers.
• RED Compliance Services Comprehensive consulting service for RED Directive cybersecurity compliance, including gap analysis, assessment of harmonized standards, requirements definition, test case development, and preparation of technical documentation for manufacturers, importers, and distributors of radio equipment.

Quantifiable outcome

• Weseth® Box can be self-installed within 1 hour without impacting IT infrastructure
• +2 more outcomes

Named customers5 records

Segments2 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability3 records

Feature7 records

Partnerships

Four partnerships are on record, tiered core and minor.

• Auxilium Pentest LabscoreStrategic or Co-development Partner · 17 November 2025Drivesec and Auxilium Pentest Labs (CTF winner at DEF CON 33, specialized in Embedded Systems Penetration Testing) announced a strategic partnership offering integrated and continuous cybersecurity testing across automotive, IoT, and connected systems. Auxilium performs remote penetration tests via the Weseth platform. Key deliverables include: remote and secure testing, AI-based test code generation, access to a large knowledge base of test software, increased speed and flexibility, and CI/CD integration.
• American Center for Mobility (ACM)coreStrategic or Co-development Partner · 13 November 2025The American Center for Mobility (ACM) and Drivesec signed an MOU to jointly promote and market the Weseth® platform and related cybersecurity services within ACM's Willow Run ecosystem in Ypsilanti, Michigan. The partnership offers pre-scheduled demonstrations, briefings, and learning sessions at ACM, advancing practical cybersecurity education for mobility product teams.
• Auto-ISACminorStrategic or Co-development PartnerDrivesec is a member of Auto-ISAC (Automotive Information Sharing and Analysis Center), contributing to the automotive cybersecurity community and participating in events such as Auto-ISAC Partner Week. A Drivesec specialist, Cosimo Senni Guidotti Magnani, previously served as European Steering Committee Vice Chair at Auto-ISAC.
• UNINFOminorStrategic or Co-development PartnerDrivesec joined UNINFO, the federated body to UNI (Italian Standards Organization) for information technologies, which is responsible for CRA-related standardization activities. A Drivesec Cybersecurity Specialist, Andrea Perno, was selected to join the national group of experts involved in these standardization efforts.

Scale indicators6 records

Recent moves10 records

Expansion highlights6 records

Direct peers

• Karamba Security: Israeli-headquartered automotive and IoT embedded cybersecurity vendor offering vulnerability prevention and penetration testing for connected vehicles and devices. Directly comparable to Drivesec in target customers (automotive OEMs, Tier 1s) and product category (embedded security testing).
• Argus Cyber Security: Automotive cybersecurity specialist (acquired by Continental) offering in-vehicle network protection, penetration testing, and UNECE R155 compliance services. Directly competes with Drivesec in automotive cybersecurity validation and homologation support.
• Cybellum: Product security platform for connected vehicles and IoT/medical devices, focused on software bill of materials (SBOM), vulnerability management, and compliance with automotive and medical cybersecurity regulations. Comparable to Drivesec in IoT/automotive compliance tooling and product cybersecurity posture management.

Broad incumbents

• ETAS: Bosch subsidiary providing automotive cybersecurity solutions, embedded security tools, and engineering services across the vehicle development lifecycle. A larger incumbent offering overlapping capabilities in automotive security validation and testing.
• Vector Informatik: Established automotive tools and services vendor with a security testing portfolio (e.g., CANoe, vTESTcenter) used widely by OEMs and Tier 1s. Overlaps with Drivesec in automotive cybersecurity test automation and CI/CD integration.
• Synopsys (Black Duck Software Integrity): Major application security and DevSecOps platform vendor with automotive and IoT security testing offerings (including fuzzing and static analysis). Broader portfolio than Drivesec but overlaps in automated security testing for embedded and connected products.
• NCC Group: Global cybersecurity services firm offering penetration testing, red teaming, and product security assessments for connected devices, automotive, and IoT. Comparable in testing services capability, though broader and much larger than Drivesec.
• Trustwave: MSSP and cybersecurity services provider offering penetration testing, vulnerability management, and IoT/OT security assessments. Overlaps with Drivesec's cybersecurity testing and compliance services for connected products.

Emerging players

• Riscure: Specialist security testing lab for connected devices, smart cards, and embedded systems with a strong automotive practice (UNECE R155/R156). Closely comparable to Drivesec's testing and compliance focus but with a services-led model rather than a proprietary platform-plus-hardware offering.

Others

• NXP Semiconductors (EdgeLock & Security Services): Major automotive semiconductor vendor offering embedded security solutions and security enablement services. An ecosystem participant rather than direct competitor, but adjacent in the automotive cybersecurity value chain where Drivesec's customers source secure silicon.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/drivesec-srl

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Subsidiaries2 records

Funding overview

Funding rounds2 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Drivesec