What Block Harbor Cybersecurity does

Block Harbor Cybersecurity is a Detroit-headquartered, privately held firm founded in 2015 that provides cybersecurity services and a proprietary platform to the automotive industry, with a stated mission to secure connected vehicles and mobility systems across their full lifecycle. Its core product is the VSEC (Vehicle Security Engineering Cloud) platform — a SaaS offering that combines expert-curated templates, automated threat analysis, TARA workflows, SBOM extraction, vulnerability tracking, supplier survey management, and continuous security monitoring from vehicle design through decommissioning, and that includes niche capabilities such as firmware country-of-origin scanning relevant to Rule 791D compliance.

The company monetizes through a mix of subscription/managed platform access (VSEC, VSOC/PSIRT) and high-margin professional services delivered by two dedicated teams: a Red Team offering penetration assessments ($50K+), remote penetration testing ($30K+), reverse engineering, fuzz testing, and regression testing aligned to ISO/SAE 21434 and UN R155; and a Blue Team offering ISO 21434 implementation packages ($20K), TARA services ($45K+), gap analysis and remediation, and VSOC/PSIRT implementation ($150K+). Customer segmentation is overwhelmingly enterprise automotive — OEMs such as Ford, Stellantis, Volkswagen, and Volvo, Tier 1 suppliers including Bosch, BorgWarner, and Harman International — with adjacent exposure to Tier 2/3 suppliers, fleet operators, and defense agencies pursuing AI-powered mobility security.

Go-to-market is consultative direct enterprise sales supplemented by thought leadership content, a flagship $100K Automotive Capture the Flag competition, conference presence (ESCAR, Cansecwest), and brand assets tied to the founders' automotive roots (the company was started by CEO Brandon Barry after exposure to the 2015 Jeep hack during an internship at Fiat Chrysler). Leadership includes COO Andre Weimerskirch, whose embedded cybersecurity experience dates to 2002 and who helped shape ISO/SAE 21434. The firm operates as a deliberately small, highly specialized boutique (firmographics list 1–10 employees) and has not disclosed external funding.

Name

Block Harbor Cybersecurity

Legal name

Block Harbor Cybersecurity

Website

https://blockharbor.io

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1–10 employees

Short description

Block Harbor Cybersecurity is a Detroit-based firm that provides vehicle cybersecurity services and its proprietary VSEC platform to automotive OEMs, Tier 1 suppliers, and defense agencies, covering the full lifecycle from design through decommissioning via Red Team offensive testing, Blue Team defensive services, and SaaS-based threat analysis and compliance tooling.

Ownership category

akta.pro rank

Product category

Automotive Cybersecurity

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

Keywords

• Vehicle cybersecurity
• Automotive penetration testing
• TARA risk assessment
• VSOC managed services
• ISO 21434 compliance

Headquarters

HQ city

Detroit

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. VSEC Platform (SaaS): The Vehicle Security Engineering Cloud (VSEC) platform is offered as a subscription-based SaaS solution, providing automotive cybersecurity automation tools for design, implementation, testing, and monitoring phases of vehicle programs. Customers can adopt the tool for self-service security engineering or complement it with professional services.
2. Red Team Services: Offensive security expert services including penetration assessments ($50,000+), remote penetration testing ($30,000+), reverse engineering, fuzz testing ($20,000+), and regression testing. Services follow ISO/SAE 21434 and UN R155 standards.
3. Blue Team Services: Defensive security services including ISO 21434 implementation packages ($20,000), gap analysis ($15,000+), gap remediation ($10,000+), TARA services ($45,000+), VSOC/PSIRT implementation ($150,000+), and analyst services ($60,000+).
4. VSOC/PSIRT Managed Services: Ongoing monitoring and response services for vehicle fleets, providing analyst augmentation and continuous security oversight through the VSEC platform.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels8 records

Core offering

Block Harbor Cybersecurity provides vehicle cybersecurity products and services to automotive OEMs, Tier 1 suppliers, and defense agencies. Its core offering is the VSEC (Vehicle Security Engineering Cloud) SaaS platform, which automates threat analysis, vulnerability tracking, firmware SBOM extraction, and compliance documentation across the entire vehicle lifecycle from design to decommissioning. This platform is paired with Red Team (offensive penetration testing, reverse engineering, fuzz testing) and Blue Team (CSMS/VSOC/PSIRT implementation, TARA execution) professional services delivered by specialized automotive cybersecurity experts.

Product overview

Block Harbor Cybersecurity offers a unified vehicle cybersecurity portfolio built around its proprietary VSEC (Vehicle Security Engineering Cloud) platform, complemented by Red Team and Blue Team managed security services. The VSEC platform serves as the core product—a cloud-based cybersecurity management system that covers the full vehicle lifecycle from design through decommissioning, providing automated threat analysis, vulnerability tracking, and compliance documentation. The company pairs platform capabilities with two professional service offerings: Red Team Services (offensive penetration testing, reverse engineering, fuzz testing, and regression testing delivered by expert security engineers) and Blue Team Services (defensive services including CSMS implementation, VSOC/PSIRT setup, and TARA execution). Add-on modules include specialized assessments, remote penetration testing, Splunk-based VSOC visualization, and sector-specific solutions for medical devices and industrial IoT. The portfolio is designed to serve global automakers and Tier 1/2 suppliers with both self-service platform tools and full-stack professional services.

Differentiator

Problem solved

Functional benefit

Products and services

• VSEC Platform (Vehicle Security Engineering Cloud) The Vehicle Security Engineering Cloud (VSEC) is Block Harbor's proprietary cybersecurity SaaS platform that combines human expertise with automated tools to secure vehicle programs throughout their entire lifecycle—from design to decommissioning. The platform provides automated threat analysis, engineering and developer guidance, real-time vulnerability tracking, security assessment management across components and suppliers, and continuous security oversight for compliance documentation. Targeted at automotive OEMs, Tier 1 suppliers, fleet operators, and defense agencies.
• Red Team Services Offensive security services delivered by expert security engineers who test vehicle systems for advanced cybersecurity vulnerabilities. Services include penetration assessment ($50,000+), remote penetration assessment ($30,000+), reverse engineering, fuzz testing ($20,000+), and regression testing. All testing follows ISO/SAE 21434 and UN R155 standards. Targeted at automotive OEMs and Tier 1 suppliers requiring regulatory-compliant offensive security testing.
• Blue Team Services Defensive security services including Cybersecurity Management System (CSMS) implementation, Vehicle Systems Monitoring (VSOC/PSIRT), and Threat Analysis and Risk Assessment (TARA). Blue Team services help design, implement, and monitor cybersecurity for vehicle products throughout the product lifecycle. The team has led 300+ TARAs and helped launch the industry's first automotive VSOCs. Targeted at automotive OEMs and Tier 1 suppliers needing defensive cybersecurity and compliance support.
• VSOC/PSIRT Implementation Custom Vehicle Security Operations Center (VSOC) and Product Security Incident Response Team (PSIRT) implementation services. Tailored SIEM solutions that work with existing systems to ensure regulatory compliance while minimizing costs. Implementation pricing starts at $150,000+ with a 6+ month timeline. Targeted at OEMs and large suppliers needing continuous vehicle security operations.
• TARA Services

Quantifiable outcome

• 500K+ vulnerabilities found and fixed for customers
• +4 more outcomes

Named customers7 records

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability6 records

Feature9 records

Partnerships

One partnership is on record.

• GoogleflagshipStrategic or Co-development Partner · 1 January 2025Block Harbor was selected for Google's AI Academy: American Infrastructure program, which opens Google's AI ecosystem to startups focused on American infrastructure. This partnership provides access to Google's world-class AI tools and reinforces Block Harbor's credibility as a core partner to OEMs, Tier 1 suppliers, and defense agencies facing urgent cybersecurity challenges. The partnership supports development of advanced AI capabilities within the VSEC platform for securing AI-powered mobility systems.

Scale indicators7 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• VicOne: Automotive cybersecurity subsidiary of Trend Micro offering VSOC, penetration testing, and OEM cybersecurity consulting; directly overlaps with Block Harbor's services + platform model across automotive cybersecurity.
• NCC Group: Global cybersecurity consultancy with a dedicated automotive practice providing penetration testing, ISO/SAE 21434 consulting, and TARA services; competes with Block Harbor's services across the same automotive standards-driven engagements.
• Upstream Security: Israel-based automotive cybersecurity platform vendor delivering cloud-based vehicle cybersecurity monitoring (VSOC) and threat intelligence to OEMs and fleet operators; directly comparable to Block Harbor as another pure-play vehicle cyber SaaS + services company.
• Pen Test Partners: UK-based penetration testing firm with a high-profile vehicle cybersecurity practice (frequent media appearances on car hacking); competes for similar automotive and connected-vehicle Red Team engagements.
• IOActive: Specialist offensive security firm with a well-established automotive and embedded systems penetration testing practice; competes head-to-head with Block Harbor's Red Team services for vehicle pen-test budgets.
• Karamba Security: Israeli automotive embedded cybersecurity vendor providing in-vehicle intrusion prevention and supply chain risk management tooling; competes for the same OEM/Tier 1 wallet on connected-vehicle security controls and ISO 21434 compliance.
• Cybellum (LG Vehicle component Solutions): Acquired by LG, Cybellum provides automotive SBOM, vulnerability management, and risk assessment platforms for OEMs and Tier 1s, closely matching Block Harbor's VSEC firmware SBOM and TARA capabilities.
• Argus Cyber Security: Israeli vehicle cybersecurity specialist (now part of Continental) offering in-vehicle network protection, VSOC, and penetration testing to global OEMs; directly competes with Block Harbor's Red Team and VSEC offerings across the same automotive buyer base.
• GuardKnox Cyber Technologies: Israeli automotive cybersecurity vendor providing in-vehicle and off-vehicle security solutions for OEMs; comparable to Block Harbor as another pure-play automotive cybersecurity specialist.

Emerging players

• SafeBreach: Breach and attack simulation platform that overlaps with Block Harbor's continuous validation and 'testing as a service' capabilities, though broader than automotive specifically; relevant peer for the VSEC Test / testing automation wedge.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/block_harbor?lang=en
• YouTubeyoutube.com/@blockharbor
• LinkedInlinkedin.com/company/block-harbor

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Block Harbor Cybersecurity