Auxilium Pentest Labs

What Auxilium Pentest Labs does

Auxilium Pentest Labs is a Czech-founded, privately-held cybersecurity professional services firm established in 2019 as a spin-off from Auxilium Cyber Security by Managing Director Martin Pozdena. The company specializes in penetration testing of automotive systems and broader embedded/hardware platforms, operating two specialized hardware laboratories — an EU Lab in Prague and a USA Lab in Bingham Farms, Michigan — equipped for full-vehicle and single-ECU testing.

Service delivery spans automotive penetration testing (infotainment, gateways, ADAS, on-board chargers, ICE and EV powertrains), embedded-systems pentesting (medical devices, railway, maritime, ICS/SCADA, aerospace, IoT, backend), and compliance-oriented offerings aligned with UNECE R155/R156, NIS2, the EU Cyber Resilience Act, IEC 62443, and MDR/IVDR. The firm's notable proprietary technology is CANdy, an open-source automated CAN bus message mapping and decoding framework with an extensible API. Auxilium reports 250+ completed penetration tests and 60+ enterprise customers, including marquee OEMs and Tier-1 suppliers such as Aptiv, Bosch, Continental, Volvo, Škoda, Harman, MagnaSteyr, and Nikola, alongside customers in healthcare (Dräger, Orthoscan, Securitas Healthcare), industrial (ComAp, Bender), transportation (Škoda Transportation, The Signalling Company), energy (Jablotron), and government (ENISA).

Revenue is generated exclusively through project-based professional services engagements, scoped by man-days with examples ranging from 1 MD for a single-IP external test to 40 MDs for an automotive head unit; contracts are described as multi-year but engagements are individually scoped rather than productized. The go-to-market is consultative enterprise field sales — direct engagement with OEMs, Tier-1 suppliers, and critical-infrastructure operators through website contact, Calendly, and industry conferences (DEF CON, CCC, Black Hat, TROOPERS, ESCAR). The team is led by Martin Pozdena (Managing Director), Francisco García López (Technical Director), and Thomas Sermpinis (Supervisory Board Member / former CTO), and Auxilium holds TISAX AL3 certification. No institutional investors or external funding rounds are disclosed.

Name

Auxilium Pentest Labs

Legal name

Auxilium Pentest Labs a.s.

Website

https://auxilium-labs.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Auxilium Pentest Labs is a private penetration testing firm, founded 2019 in Prague with a US lab in Michigan, specializing in automotive and embedded systems cybersecurity. It serves 60+ enterprise clients across OEMs, Tier-1 suppliers, and critical-infrastructure operators via man-day-scoped, multi-year engagements.

Ownership category

akta.pro rank

Product category

Cybersecurity Penetration Testing Services

NAICS

Testing Laboratories and Services (54138)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Penetration Testing & Red Teaming (BPAKAHAF)

Keywords

• Automotive penetration testing
• Embedded systems security
• Vehicle cybersecurity testing
• Industrial control security
• Hardware security testing

Headquarters

HQ city

Prague

HQ country

Czechia

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Professional Penetration Testing Services: Project-based penetration testing engagements for automotive components, embedded systems, and critical infrastructure. Scoped by man-days based on complexity and target systems.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Auxilium Pentest Labs delivers specialized hardware penetration testing services for automotive systems (full vehicles, ECUs, infotainment, gateways, ADAS, OBC, ICE and EV powertrains) and a broad range of embedded/safety-critical systems (medical devices, railway, maritime, ICS/SCADA, aerospace, IoT, defense, and backend). Services are scoped per engagement and supported by compliance gap analyses for UNECE R155/R156, IEC 62443, NIS2, CRA, and MDR/IVDR. All work is executed from dedicated hardware penetration testing laboratories in Prague (EU) and Bingham Farms, Michigan (USA), delivered by researchers with a track record of 0-day disclosures and DEF CON 33 CTF victory.

Product overview

Auxilium Pentest Labs provides specialized penetration testing and cybersecurity assessment services organized into two primary categories: Automotive Penetration Testing (covering full vehicles, ECUs, infotainment, gateways, ADAS, and EV powertrains) and Embedded Systems Pentesting (covering medical devices, railway, maritime, ICS/SCADA, aerospace, IoT, and backend systems). The company also offers compliance-focused services including Cyber Resilience Act (CRA) Compliance, IEC 62443 Penetration Testing, and NIS2 Compliance. All services are delivered by security researchers from laboratory facilities in Prague and Detroit.

Differentiator

Problem solved

Functional benefit

Products and services

• Automotive Penetration Testing Penetration testing of automotive components ranging from full vehicles through specific functional domains like ADAS up to single ECUs, covering infotainment, gateways, ADAS, OBC, and both ICE and EV powertrains. Targeted at automotive OEMs and Tier-1 suppliers.
• Embedded Systems Pentesting Penetration testing services for a wide variety of embedded targets including railway and military controllers, ICS/SCADA systems, aerospace equipment, medical devices, and regular backend systems.
• Medical Device Penetration Testing Cyber resilience assessment for connected medical technologies including medical imaging systems, remote monitoring devices, implantable device interfaces, surgical robots, and hospital network-connected devices.
• Railway Penetration Testing Security assessment of railway control systems including signaling systems, communication networks, train control systems, and infrastructure vulnerability identification.
• Maritime Penetration Testing Cybersecurity assessment for vessel IT and OT environments, bridge systems, engine/cargo/ballast control systems, satellite communications, and port infrastructure.
• ICS / SCADA Penetration Testing Security testing for Industrial Control Systems and Supervisory Control and Data Acquisition systems, including vulnerability identification and resilience assessment.
• Backend Penetration Testing Comprehensive security evaluation of backend systems, APIs, internal networks, mobile/desktop applications, and servers.
• Aerospace Penetration Testing Security assessment for flight systems and avionics including communication networks, ARINC networks, and aircraft software analysis.
• IoT Penetration Testing Security testing for Internet of Things devices including consumer-grade devices, industrial sensors, smart home hubs, and connected healthcare devices.
• Cyber Resilience Act (CRA) Compliance Gap analysis and penetration testing services to help organizations comply with the Cyber Resilience Act essential cybersecurity requirements.
• IEC 62443 Penetration Testing Industrial cybersecurity compliance testing for Industrial Automation and Control Systems aligned with IEC 62443 standards.
• NIS2 Compliance Gap analysis and penetration testing services designed to support compliance with NIS2 cybersecurity obligations.

Quantifiable outcome

• 250+ successful automotive/embedded penetration tests delivered
• +2 more outcomes

Named customers20 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

Two partnerships are on record, tiered core.

• DriveseccoreStrategic or Co-development Partner · 10 November 2025Strategic partnership announced November 10, 2025 to strengthen cybersecurity testing across automotive, IoT and connected systems. Aims to offer integrated and continuous approach to validating security of electronic systems across multiple domains.
• Harman InternationalcoreStrategic or Co-development Partner · 25 May 2025Global strategic collaboration announced May 25, 2025 to strengthen automotive cybersecurity. Auxilium provides cutting-edge penetration testing services to advance cybersecurity across Harman's comprehensive portfolio of connected vehicle technologies.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• NCC Group: Global cybersecurity services firm with a dedicated transport and automotive security practice delivering penetration testing, red teaming, and security consulting to OEMs and Tier-1s. Closely comparable in service model, customer base, and technical depth.
• Karamba Security: Automotive cybersecurity company offering ECU-level security validation, penetration testing, and runtime protection for connected vehicles. Overlaps with Auxilium's ECU and embedded testing scope.
• IOActive: Specialist security consultancy with deep embedded systems, automotive, IoT, and medical device penetration testing practices. Closely comparable service mix and customer verticals.
• Cybellum: Automotive cybersecurity firm delivering software bill-of-materials analysis, vulnerability management, and penetration testing across vehicle software stacks. Direct peer in automotive cybersecurity services.
• Kudelski Security: Cybersecurity services firm with a dedicated IoT/embedded/OT security practice covering automotive, industrial, and connected-device penetration testing. Comparable technical depth and verticals.
• Argus Cyber Security: Specialist automotive cybersecurity firm (now part of Continental) focused on in-vehicle network protection, ECU hardening, and penetration testing for OEMs. Direct overlap with Auxilium's automotive testing services and customer segments.
• ESCRYPT (Bosch): Embedded systems and automotive cybersecurity provider owned by Bosch, delivering security consulting, penetration testing, and lifecycle security services to OEMs. Comparable in niche expertise, though embedded within a Tier-1 supplier.

Emerging players

• Trustonic: Embedded security provider for automotive and connected devices, offering secure execution environments and related security services. Adjacent in automotive/embedded security though more product-oriented than services-led.
• Upstream Security: Automotive cybersecurity vendor focused on vehicle SOC and fleet-level threat detection, with adjacent testing and risk assessment services. Comparable customer base though differentiated toward ongoing monitoring rather than pentesting.

Broad incumbents

• WithSecure (formerly F-Secure): Established European cybersecurity firm with a dedicated automotive and embedded security consulting practice. Broad incumbent with overlapping services though serving a wider portfolio of customers and sectors.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/auxilium-pentest-lab

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Auxilium Pentest Labs