EUROCYBCAR

What EUROCYBCAR does

EUROCYBCAR SL is a Basque Country-based (Vitoria-Gasteiz, Spain) automotive cybersecurity company that identifies, evaluates, and certifies cyber risks in connected vehicles, fleet management systems, mobility applications, and CSMS (Cybersecurity Management Systems) against the UNECE/R155 regulation and ISO 21434 standard. The company's core technology is the proprietary ESTP (EUROCYBCAR Standard Test Protocol), an internationally patented modular methodology that conducts physical access testing (OBD ports, USB), remote access testing (Bluetooth, Wi-Fi, keyless entry), and application testing (in-vehicle apps and brand mobile apps). Vehicles that pass the test receive a 'Cybersecurity in Vehicles — UNECE/R155 — ESTP' certificate (scored 3–5), jointly issued with AENOR as the independent auditor.

The company monetizes primarily through professional services: per-vehicle cybersecurity certification and testing engagements with automotive OEMs and manufacturers; cybersecurity testing for fleet management systems and mobility platforms; advisory services for public entities, mobility companies, fleet operators, police forces, and armed forces; and specialized online training courses (12 hours each) covering UNECE/R155, fleet cybersecurity, and vehicle forensic appraisal, delivered in partnership with CYBENTIA. Pricing is uniformly consult-based with no public tiers, reflecting bespoke enterprise engagements. Go-to-market combines direct enterprise field sales, channel partnerships (AENOR for certification, CYBENTIA for training, HackerCar for expert testers), and content/event-driven thought leadership across a portfolio of industry associations (CYBASQUE, GAIA, AMETIC, AEDIVE, women4cyber, CCAM, M2F, UNE). EUROCYBCAR operates from its laboratory at the Parque Tecnológico de Álava in Vitoria-Gasteiz with a secondary office in Madrid, runs a team of approximately 16 employees, and maintains a curated database of vehicle cyberattacks since 2012 and recalls since 2010.

Name

EUROCYBCAR

Legal name

EUROCYBCAR SL

Website

https://eurocybcar.com

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

EUROCYBCAR is a Basque Country-based automotive cybersecurity firm that tests and certifies connected vehicles, fleet systems, and mobility platforms against UNECE/R155 and ISO 21434 using its patented ESTP methodology, serving OEMs, fleet operators, government, and defense clients.

Ownership category

akta.pro rank

Product category

Automotive Cybersecurity Testing & Certification

NAICS

Investigation and Security Services (5616)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)

akta.pro secondary industry

Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)

Keywords

• Vehicle cybersecurity testing
• Automotive cybersecurity certification
• UNECE R155 compliance
• Fleet cybersecurity assessment
• Connected vehicle security

Headquarters

HQ city

Vitoria-Gasteiz (Álava/Miñano)

HQ country

Spain

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Vehicle Cybersecurity Certification: EUROCYBCAR performs technical cybersecurity testing of vehicles using the ESTP methodology and issues a certificate of cybersecurity in partnership with AENOR. The certificate is valid for three years. This is the core revenue-generating service targeting automotive OEMs and manufacturers.
2. Cybersecurity Testing Services (Vehicles & Fleets): The company performs EUROCYBCAR Tests on vehicles (physical, remote, and app-based), fleet management systems, and mobility platforms to evaluate cybersecurity levels against UNECE/R155 and ISO 21434 requirements.
3. Specialized Training Programs: EUROCYBCAR offers online training courses on vehicle cybersecurity, including UNECE/R155 regulations (12 hours, consult pricing), fleet vehicle cybersecurity, and cybersecurity applied to vehicle forensic appraisal. Training is delivered in partnership with CYBENTIA and is bonificable through FUNDAE (Spanish professional training fund).
4. Cybersecurity Advisory Services: Advisory services for public entities with vehicle fleets, mobility companies, fleet operators, police forces, and armed forces regarding cybersecurity strategy, CSMS implementation, and compliance with UNECE/R155.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels10 records

Core offering

EUROCYBCAR identifies, evaluates and certifies cybersecurity risks affecting vehicles, fleet management systems, mobility applications and CSMS according to the UNECE/R155 regulation and ISO 21434 standard, using its proprietary ESTP (EUROCYBCAR Standard Test Protocol) methodology that holds an international patent. Its core deliverable is the 'Cybersecure Vehicle' certification (scores 3 to 5) audited with AENOR, complemented by cybersecurity advisory for fleets, mobility companies, police and armed forces, and specialized training programs delivered with CYBENTIA.

Product overview

EUROCYBCAR offers a modular cybersecurity platform anchored by its proprietary ESTP (EUROCYBCAR Standard Test Protocol) methodology with international patent. The platform provides vehicle cybersecurity certification against UNECE/R155 standards, cybersecurity certificates for web platforms and mobility apps, advisory services for public and private entities with vehicle fleets, and specialized training courses. The core EUROCYBCAR Test evaluates cybersecurity through three testing types: physical access testing (OBD ports, USB vulnerabilities), remote access testing (Bluetooth, Wi-Fi, keyless systems), and application testing (vehicle-integrated apps and brand mobile apps). All certifications are audited and issued through partnership with AENOR.

Differentiator

Problem solved

Functional benefit

Products and services

• EUROCYBCAR Test (ESTP Methodology) Proprietary, internationally patented cybersecurity testing methodology that evaluates vehicle cybersecurity levels against UNECE/R155 through physical access testing (OBD port, USB), remote access testing (Bluetooth, Wi-Fi, keyless entry) and application testing (vehicle-integrated and brand mobile apps). Sold as a standalone testing engagement to automotive OEMs and manufacturers.
• Cybersecure Vehicle Certificate — UNECE/R155 Cybersecurity certification for vehicles ensuring compliance with the UNECE/R155 regulation; vehicles are scored from 3 to 5 (5 being highest protection), the certificate is valid for three years and is co-issued with AENOR. Sold to automotive OEMs, manufacturers and importers seeking regulatory compliance for homologation and marketing in the EU and UNECE-adhering countries.
• Cybersecurity Certificate for Web Platforms and Mobility Apps Cybersecurity certification service for web platforms and mobility applications that manage or interface with connected vehicles and fleets. Sold to mobility platforms and operators requiring independent verification of their web/app security posture.
• Cybersecurity Advisory for Public Entities with Vehicle Fleets Cybersecurity advisory services for public sector entities operating vehicle fleets, covering CSMS implementation, risk assessment and compliance with UNECE/R155. Sold to government bodies and public administrations with vehicle fleets.
• Cybersecurity Advisory for Mobility Companies and Fleet Operators Advisory services for mobility companies and organizations with vehicle fleets, including fleet management system cybersecurity, telematics security, CSMS implementation and secure vehicle procurement guidance. Sold to fleet operators, rental/leasing companies, car-sharing platforms and logistics providers.
• CyberMovilidad Advisory for Police Forces and Armed Forces Specialized cybersecurity advisory services for law enforcement and military organizations on CyberMovilidad (cyber mobility), protecting vehicle fleets, connected systems and operational security. Sold to police forces and armed forces / defense organizations.
• Training Course — UNECE/R155 Vehicle Cybersecurity Regulation 12-hour online course on the UNECE/R155 vehicle cybersecurity regulation, covering vulnerabilities, cyber attacks on vehicles and fleets, and the EUROCYBCAR testing methodology. Delivered in partnership with CYBENTIA and bonificable through FUNDAE. Targeted at car brands, dealers, insurers, workshops, component manufacturers, fleet companies and end users.
• Training Course — Cybersecurity in Vehicle Fleets Course covering connected vehicle fleets, fleet management systems, cybersecurity risks and CSMS implementation for organizations operating vehicle fleets. Delivered online (12 hours), in partnership with CYBENTIA, and bonificable through FUNDAE. Targeted at companies with vehicle fleets, rental/leasing, car-sharing, logistics, insurers, workshops and fleet managers.
• Training Course — Cybersecurity Applied to Vehicle Forensic Appraisal Course on cybersecurity applied to vehicle forensic examination, covering the technologies that provide information for expert investigations of vehicle cyber incidents. Targeted at forensic experts, insurers, investigators and security professionals.

Quantifiable outcome

• First vehicle in history to achieve 'Cybersecure Vehicle' certification — NUUK Cargopro electric motorbike passed the EUROCYBCAR Test per UNECE/R155
• +2 more outcomes

Named customers2 records

Segments7 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature6 records

Partnerships

14 partnerships are on record, tiered core, supporting and minor.

• AENORcoreStrategic or Co-development Partner · 25 November 2024EUROCYBCAR and AENOR co-developed the 'Cybersecurity in Vehicles — UNECE/R155 — ESTP' certification. AENOR acts as the independent auditor and issuer of the certificate, providing third-party credibility. AENOR's established relationships with automotive manufacturers create a distribution advantage for EUROCYBCAR's testing services. The partnership was formalized with a press release in November 2024.
• NUUK Mobility SolutionscoreStrategic or Co-development Partner · 22 December 2021NUUK Mobility Solutions (Basque electric mobility startup) was the first company to have its vehicle (NUUK Cargopro electric motorbike) pass the EUROCYBCAR Test and receive the world's first 'Cybersecure Vehicle' certificate audited by AENOR. This partnership established EUROCYBCAR's market proof-of-concept and first certified customer. NUUK's design and development is based in Bizkaia, Spain, and assembly is done by RIEJU in Catalonia.
• CYBENTIA GroupcoreChannel Partner/ Reseller/ DistributorCYBENTIA Group collaborates with EUROCYBCAR to deliver specialized training courses on vehicle cybersecurity (UNECE/R155, fleet cybersecurity, and forensic appraisal). CYBENTIA provides the training administration, platform, and marketing while EUROCYBCAR supplies technical content and expert trainers (including Cyber Q-Testers from HackerCar). Training courses are bonificable through FUNDAE.
• HackerCar (Cyber Q-Testers)supportingImplementation/ SI/ Consulting PartnerHackerCar's team of Cyber Q-Testers (hackers, IT engineers, and car testers) serve as expert testing personnel for EUROCYBCAR's technical cybersecurity evaluations. HackerCar experts co-teach EUROCYBCAR's training courses alongside EUROCYBCAR's technical team.
• Basque Cybersecurity Centre (BCSC)supportingStrategic or Co-development PartnerEUROCYBCAR operates under the umbrella of the Basque Cybersecurity Centre, which provides institutional support, research collaboration, and access to the Basque cybersecurity ecosystem. The BCSC is part of the Basque Government's SPRI agency.
• RIEJUsupportingImplementation/ SI/ Consulting PartnerRIEJU is a Catalan motorcycle manufacturer that assembles NUUK's electric motorbikes. Through the NUUK partnership, RIEJU is indirectly involved in the production of the world's first certified cybersecure vehicle.
• CYBASQUE (Basque Cybersecurity Cluster)minorOthersCYBASQUE is the Basque cybersecurity industry cluster. EUROCYBCAR is a member, using this association for networking, ecosystem visibility, and industry collaboration within the Basque Country's cybersecurity community.
• GAIA (Basque Technology Association)minorOthersGAIA is the Basque technology association. EUROCYBCAR's membership provides access to the Basque technology industry network.
• AMETIC (Spanish ICT Association)minorOthersAMETIC is Spain's leading ICT industry association. EUROCYBCAR's membership supports national visibility within the Spanish technology and digital industry.
• AEDIVE (Spanish Electric Mobility Association)minorOthersAEDIVE is the Spanish electric mobility association. EUROCYBCAR's membership aligns with its focus on connected and electric vehicle cybersecurity.
• women4cyber (European Cybersecurity Skills Initiative)minorOtherswomen4cyber is a European initiative promoting women's participation in cybersecurity. EUROCYBCAR's association with this initiative, given its female-led CEO Azucena Hernández, supports diversity and talent development goals.
• CCAM (Connected Collaboration for Advanced Manufacturing)minorOthersCCAM is a European research and innovation partnership in advanced manufacturing. EUROCYBCAR's association supports access to EU-funded research collaborations and ecosystem visibility.
• M2F (Move2Future)minorOthersM2F (Move2Future) is a mobility ecosystem initiative. EUROCYBCAR's partnership supports networking within the connected mobility and sustainable transport community.
• UNE (Spanish Association for Standardization)minorOthersUNE is the Spanish association for standardization. EUROCYBCAR's association supports alignment with Spanish and European standards development in vehicle cybersecurity.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• SGS: World's largest testing, inspection and certification company with an automotive cybersecurity practice spanning ISO/SAE 21434 audits and OEM compliance testing. Its scale and global lab footprint make it a relevant incumbent competitor to EUROCYBCAR's niche positioning.
• DEKRA: Global TIC firm with extensive automotive testing, homologation, and emerging cybersecurity service lines. Although broader than EUROCYBCAR, it competes for the same OEM and fleet compliance engagements across European markets.

Direct peers

• NCC Group: Global cybersecurity consultancy with a dedicated transport and connected-vehicle practice performing vehicle penetration testing, ISO/SAE 21434 gap analyses, and UNECE/R155 readiness support. Directly competes for OEM cybersecurity testing budgets with similar services to EUROCYBCAR's ESTP.
• TÜV Rheinland: Global TIC provider offering automotive cybersecurity evaluations under UNECE/R155 and ISO/SAE 21434, alongside type approval and homologation services. Directly competes with EUROCYBCAR for OEM certification mandates across multiple European jurisdictions.
• Applus+ IDIADA: Spanish automotive engineering, testing and certification company headquartered in Catalonia with extensive OEM relationships. Provides vehicle homologation and certification services, including emerging cybersecurity evaluation, making it a direct domestic competitor to EUROCYBCAR in the Iberian market.
• SBD Automotive: Independent automotive research and consulting firm specializing in connected car security, ADAS, and cyber risk assessment. Conducts vehicle cybersecurity benchmarking and offers testing services to OEMs, placing it in direct competition with EUROCYBCAR for advisory and testing engagements.
• Cybellum: Israeli automotive cybersecurity company delivering component-level (ECU) binary analysis, vulnerability management, and compliance reporting under ISO/SAE 21434 and UNECE/R155. Targets the same OEM certification problem as EUROCYBCAR but emphasizes software bill-of-materials and component scanning over full-vehicle testing.
• Argus Cyber Security (Continental): Israeli automotive cybersecurity firm (acquired by Continental in 2017) providing in-vehicle network protection, penetration testing, and CSMS implementation support to OEMs and Tier-1 suppliers. Overlaps with EUROCYBCAR in vehicle and fleet cybersecurity testing and R155 compliance services.
• TÜV SÜD: Global testing, inspection and certification (TIC) firm with an active automotive cybersecurity practice offering UNECE/R155 and ISO/SAE 21434 testing and certification. Operates large lab networks and competes with EUROCYBCAR for OEM certification mandates across Europe.

Emerging players

• Upstream Security: Israeli cloud-based vehicle cybersecurity platform focused on operational (post-production) security monitoring, threat intelligence, and fleet-level detection rather than certification. Adjacent rather than direct, but serves the same OEMs working to satisfy R155 requirements over the vehicle lifecycle.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights6 records

Customer concentration

• Xx.com/eurocybcar
• YouTubeyoutube.com/channel/UCAr6MKRjmqA8sIk9S9yiLHA
• Facebookfacebook.com/EUROCybcar-2096175097359964
• LinkedInlinkedin.com/company/eurocybcar

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about EUROCYBCAR