AUTOMOTIVE INFORMATION SHARING AND ANALYSIS CENTER

What AUTOMOTIVE INFORMATION SHARING AND ANALYSIS CENTER does

Auto-ISAC is a 501(c)(6) nonprofit industry consortium founded in 2015 and headquartered in Washington, D.C., that functions as the central intelligence-sharing and coordination body for automotive cybersecurity across North America, Europe, and Asia. Its members collectively represent more than 99% of light-duty vehicles on North American roads and span roughly 80 organizations globally, including major OEMs (Toyota, GM, Ford, Stellantis, BMW, Honda, Hyundai, Kia, VW, Daimler Truck, Volvo), Tier-1 suppliers (Bosch, DENSO, Aptiv, Magna, Continental), and newer entrants in autonomous trucking and automotive electronics (PlusAI, Garmin). The organization's operational model is community-led rather than product-led: it collects, analyzes, and redistributes threat intelligence through a members-only secure RED Platform (Reporting Exchange and Discussion), publishes the Automotive Threat Matrix (ATM) knowledge base of adversary tactics, issues an open-source daily DRIVEN intelligence briefing, develops Best Practice Guides, runs the ACT certification program, and convenes monthly community calls plus annual summits in both the US and Europe.

The core technology stack is a coordination and knowledge-management layer rather than a productized SaaS platform. Differentiated artifacts include the Automotive Threat Matrix (domain-specialized taxonomy of automotive adversary TTPs), the SBOM Informational Report (developed collaboratively by 54 member companies), the TRACK supplier-assessment framework, and the proprietary RED Platform for incident and vulnerability exchange. Auto-ISAC also coordinates with 23 other critical-infrastructure ISACs through the National Council of ISACs, giving it reach into adjacent sectors.

Revenue is generated almost exclusively through recurring annual membership dues from OEMs, suppliers, commercial fleets, and carriers, supplemented by sponsorship revenue from strategic partners (Google Cloud, NCC Group, Zscaler, Manifest, FESCARO, ENX Association). Specific fee levels are not publicly disclosed; pricing is negotiated bilaterally. Go-to-market is community- and content-led, with the website, DRIVEN newsletter, summits, and partner referrals serving as the primary acquisition and engagement channels.

Name

AUTOMOTIVE INFORMATION SHARING AND ANALYSIS CENTER

Legal name

Auto-ISAC, Inc.

Website

https://automotiveisac.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1–10 employees

Short description

Auto-ISAC is a nonprofit industry consortium founded in 2015 that enables automotive OEMs, suppliers, and mobility providers to share cybersecurity threat intelligence, best practices, and incident data through its RED Platform, Automotive Threat Matrix, and member community.

Ownership category

akta.pro rank

Headquarters

HQ city

Washington

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Membership Dues: Auto-ISAC generates revenue through membership fees paid by automotive OEMs, suppliers, commercial fleets, carriers, and other automotive sector participants. The membership model supports the organization's operations as a central hub for cybersecurity information sharing, analysis, and coordination across the global automotive industry.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels8 records

Core offering

Auto-ISAC is an industry-driven community that serves as the central hub for sharing, tracking, and analyzing intelligence about emerging cybersecurity risks to vehicles. It sells membership to automotive OEMs, suppliers, commercial fleets, carriers, and mobility providers, granting access to the secure RED Platform for intelligence sharing, the Automotive Threat Matrix (ATM), Best Practice Guides, the ACT training and certification program, monthly community calls, and annual Summits in North America and Europe.

Product overview

Auto-ISAC operates as an industry-driven community and central hub for automotive cybersecurity information sharing. The organization offers a portfolio of collaborative products and services including the Best Practice Guides (consolidated from seven to five core guides covering management, training, governance, third-party risk, and secure development), the RED Platform for secure member intelligence sharing, the Automotive Threat Matrix cataloging adversary tactics, the DRIVEN open-source news service, and the ACT training program. The organization hosts annual Cybersecurity Summits in both the US and Europe, conducts monthly community calls, and publishes reports including the SBOM Informational Report and Annual Automotive Threat Assessment.

Differentiator

Problem solved

Functional benefit

Brands

• DRIVEN: Daily Research, Incident, Vulnerability & Executive News - open-source news service supporting automotive product, IT, and OT cybersecurity.
• ACT (Automotive Cybersecurity Training)
• Automotive Threat Matrix (ATM)
• TRACK Program

Products and services

• Best Practice Guides (BPGs) Collaboratively developed cybersecurity guidance documents providing actionable practices for automotive stakeholders across the product, IT, and OT lifecycles, covering management and operations, awareness and training, governance, risk and compliance, third-party risk management, and secure development lifecycle.
• Monthly Community Calls Virtual monthly meetings for members and connected vehicle ecosystem stakeholders to stay informed of Auto-ISAC activities and share information on key vehicle cybersecurity topics, held on the first Wednesday of each month.
• Annual Cybersecurity Summit Premier automotive cybersecurity conference bringing together manufacturers, suppliers, cyber practitioners, policy leaders, and other stakeholders to share insights and real-world solutions. Hosted annually in both the US and Europe.
• DRIVEN (Daily Research, Incident, Vulnerability & Executive News) Open-source news service providing daily research, incident, vulnerability and executive news to support automotive product, IT, and OT cybersecurity.
• Reporting Exchange and Discussion (RED) Platform Secure members-only platform enabling Auto-ISAC members to share intelligence, vulnerabilities, and incident information to strengthen the industry's collective cybersecurity posture.
• Automotive Threat Matrix (ATM) Cybersecurity knowledge base cataloging adversary tactics and techniques based on real-world observations of automotive cyberattacks and peer-reviewed exploit research.
• Automotive Cybersecurity Training (ACT) Program Comprehensive training program providing cybersecurity education and certification for automotive industry professionals.
• Software Bill of Materials (SBOM) Informational Report Groundbreaking report providing effective practices to enhance software security of automotive vehicles, products, and technology, detailing key insights and guidance for SBOM implementation in the automotive industry.
• TRACK Program Trust, Risk, Assurance, Collaboration, and Knowledge program providing a shared framework for supplier cybersecurity assessments, continuous monitoring of external-facing assets, and integration of results from existing industry certifications.
• Annual Automotive Threat Assessment Comprehensive annual analysis of the global automotive cyber threat landscape, informed by Auto-ISAC Intelligence & Analysis staff and expert members from its Product Working Group and IT/OT Working Group.

Quantifiable outcome

• Members represent more than 99 percent of light-duty vehicles on the road in North America
• +2 more outcomes

Named customers18 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Six partnerships are on record, tiered core and secondary.

• ENX AssociationcoreStrategic or Co-development Partner · 17 March 2026Auto-ISAC and ENX Association signed a Memorandum of Understanding (MoU) to advance collaboration on supply-chain cybersecurity risk mitigation across the global automotive ecosystem. The partnership coordinates ENX's TISAX third-party cybersecurity assessment framework with Auto-ISAC's cyber threat intelligence collection, analysis, and sharing capabilities. Priority areas include enhancing third-party cybersecurity resilience, supporting small and medium-sized suppliers, and promoting information-sharing practices. ENX's TISAX program has more than 20,000 assessed sites across 90 countries.
• Google CloudcoreStrategic or Co-development Partner · 13 January 2026Google Cloud became a strategic partner to engage with Auto-ISAC's automotive-sector members. The partnership brings Google's cloud computing services, AI innovations, infrastructure, collaboration tools, and security capabilities to fortify the automotive industry. Google Cloud provides innovations across AI, data insights, infrastructure designed to meet industry needs, collaboration tools, and proactive security to help stop threats. Nick Godfrey serves as senior director and global head of the Office of the CISO at Google Cloud.
• ManifestsecondaryStrategic or Co-development Partner · 19 August 2025Manifest, a leader in AI and software supply chain security, joined as a strategic partner. Manifest helps automotive companies navigate cybersecurity regulations including UNECE R155, ISO/SAE 21434, and European Cybersecurity Resilience Act (CRA), manages vulnerability response across business units, detects vulnerability and license risk in open source and supplier software, and automates SBOM workflows. The company was founded by cybersecurity leaders from Palantir, U.S. Department of Defense, CISA, and Palo Alto Networks.
• FESCAROsecondaryStrategic or Co-development Partner · 19 August 2025FESCARO, a trailblazer in end-to-end mobility cybersecurity, joined as an Innovator Partner. FESCARO is an integrated automotive security platform provider helping automakers transition to software-defined vehicles with tailored cybersecurity solutions. FESCARO holds patented technologies certified to FIPS 140-2 and A-SPICE Level 2, provides HSM solutions for E/E system protection, Secure Central Gateway, and CSMS Portal for regulatory compliance.
• NCC GroupsecondaryStrategic or Co-development Partner · 17 November 2024NCC Group, a global cybersecurity firm with approximately 2,000 colleagues across Europe, North America, and Asia Pacific, joined as a strategic partner. NCC Group provides specialized cybersecurity services for the transport sector including automotive, offering vehicle security testing, regulatory compliance expertise, and supply chain management support. Andy Davis serves as Global Research Practice Director.
• ZscalersecondaryStrategic or Co-development Partner · 17 November 2024Zscaler, a leader in zero trust security, joined as a strategic partner. Zscaler extends zero trust security into the automotive and transportation industry, helps accelerate digital transformation for manufacturers and automakers, and enables new business models through simplified security. Deepak Patel serves as Senior Director OT/IoT Security at Zscaler.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• H-ISAC (Health Information Sharing and Analysis Center): Healthcare sector ISAC offering member-driven threat intelligence sharing, working groups, and best practices for medical and health-sector organizations; structurally analogous to Auto-ISAC's automotive offering.
• FS-ISAC (Financial Services Information Sharing and Analysis Center): The financial services sector's ISAC, operating the same industry-driven intelligence sharing model that Auto-ISAC applies to the automotive industry, including a member-funded hub, secure sharing platform, and best-practice guides.
• IT-ISAC (Information Technology Information Sharing and Analysis Center): IT sector ISAC for technology companies; same intelligence-sharing and analysis-center operating model as Auto-ISAC and a fellow member of the National Council of ISACs.
• Japan Auto-ISAC: Japanese counterpart organization with the same automotive-cybersecurity intelligence sharing mandate, formally collaborating with Auto-ISAC on cross-regional threat intelligence.
• A-ISAC (Aviation Information Sharing and Analysis Center): Aviation sector ISAC coordinating cyber threat intelligence among airlines, airports, and aviation suppliers; directly comparable consortium model and member base structure to Auto-ISAC.

Emerging players

• Upstream Security: Commercial automotive cybersecurity vendor offering vehicle SOC, threat intelligence, and risk management solutions that overlap with portions of Auto-ISAC's intelligence and best-practices portfolio.
• VicOne: Automotive cybersecurity vendor (Trend Micro subsidiary) delivering threat intelligence and vulnerability management tailored to connected vehicles; partially competes with Auto-ISAC's intelligence offerings.

Others

• Manifest: AI and software supply-chain security vendor that joined Auto-ISAC as a strategic partner; helps members operationalize UNECE R155, ISO/SAE 21434, SBOM workflows, and vulnerability response.
• SAE International: Standards body for the automotive and aerospace industries, co-developing frameworks such as ISO/SAE 21434 that Auto-ISAC's Best Practice Guides align with; relevant ecosystem counterpart.
• ENX Association: Operates TISAX, the automotive supply-chain cybersecurity assessment standard covering 20,000+ sites in 90 countries; a strategic partner of Auto-ISAC for supply-chain risk mitigation.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/auto-isac

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about AUTOMOTIVE INFORMATION SHARING AND ANALYSIS CENTER