Member Profile – VxLabs

What does your company do? What services or products do you provide?  

VxLabs is an automotive cybersecurity solution provider helping OEMs and Tier-1 suppliers secure connected and software-defined vehicles from design to road.

Founded in January 2022, VxLabs was created by embedded software and cybersecurity experts who saw a critical gap in automotive security tooling.

Today, the company serves automotive organizations across Europe, North America, and Asia through its U.S. parent company in Dover, Delaware, and European operations in Regensburg, Germany. Our platform, ThreatZ, is a Cybersecurity Management System (CSMS) that connects the full cybersecurity engineering lifecycle: vehicle and system modeling, TARA, cybersecurity goals and concepts, SBOM and vulnerability management, supplier tracking, security testing, incident management, monitoring, and compliance reporting against ISO/SAE 21434, UNECE R155/R156, GB 44495, and the EU CRA. These activities form one connected, traceable process — not separate tools and spreadsheets. Teams using ThreatZ have reduced TARA cycles from six weeks to three days. ThreatZ deploys as private cloud, on-premise, or fully air-gapped.

VxLabs also provides engineering and cybersecurity services across embedded systems, automotive cybersecurity, TARA, product-security engineering, connected-vehicle security, cloud architecture, cybersecurity testing, and compliance support. At VxLabs, we believe cybersecurity should accelerate automotive innovation, not slow it down. Our work is focused on helping the industry build secure, scalable, and trusted mobility systems.

Why did you join COVESA and how long has your company been a member?

We joined COVESA because the Software-Defined Vehicle changes what cybersecurity engineering has to look like. When vehicle functionality is defined by signals, APIs, and data architecture, security analysis has to operate at that same level of abstraction — and COVESA is where that architecture conversation actually happens.

We wanted to build alongside it, not next to it. Our goal is to help ensure that cybersecurity, traceability, data protection, risk context, and evidence are considered as connected vehicle and SDV standards evolve. I’ve been part of the COVESA community for years, and VxLabs joined as a member to contribute directly. Today we co-chair the COVESA Cybersecurity Group.

What benefits does your participation in COVESA bring to your company and business? 

The most concrete benefit is technical alignment: ThreatZ natively supports VSS/VISS-based vehicle signal modeling, letting analysts treat individual vehicle signals as first-class security assets and run per-signal threat analysis and risk assessment.

That capability exists because COVESA gave the industry a common language for the vehicle data layer — and we were honored that it was recognized with the Most Valuable Contributor award at the Spring 2026 AMM Showcase in Porto.

Beyond that, COVESA connects us directly with the engineers and architects defining SDV data architecture at OEMs and suppliers worldwide. Speaking at the AMM in Porto — on operationalizing a CSMS for Software-Defined Vehicles and on the automotive cybersecurity panel sharpened our thinking as much as it raised our visibility. That two-way exchange is the real value of membership.

Which COVESA collaborative project(s) or Birds of a Feather (BoF) is your company engaged in, and why is that beneficial to your business?

VxLabs co-chairs the COVESA Cybersecurity Group, whose charter includes leading the cybersecurity aspects of the VSS/VDM project — from defining security metadata for vehicle signals to building an Automotive Cybersecurity Ecosystem Map for the industry.

This is a natural fit for us: ThreatZ natively imports VSS/VISS signals and carries them end-to-end through security grading, threat modeling, and TARA — the VSS-powered approach recognized as Most Valuable Contributor at the Spring 2026 AMM Showcase in Porto. The benefit works in both directions.

Co-chairing the Cybersecurity Group keeps our platform aligned with how COVESA members model vehicle data, so our customers face no translation gap between their SDV architecture and their cybersecurity process. And our day-to-day experience operationalizing ISO/SAE 21434 and UNECE R155 across OEM and Tier-1 programs flows back into the group’s work, keeping it grounded in real engineering practice.