Skip to content

For global manufacturers entering the European market

European readiness in engineering from Germany.

Cybersecurity for the vehicles, teams and partners behind your growth in Europe, with a focus on automated driving and Level 4, connected vehicles and charging products.

Three layers of security:
  1. 03Teamworking together
  2. 02ProcessesISO/SAE 21434 · CRA
  3. 01Productsecurity by design
  • TISAX® label, assessment level 3
  • ISO 9001:2015
  • ISO/SAE 21434 engineers (TÜV NORD)
  • Regulatory affairs for Europe

01Partnering for European readiness

Readiness review, qualification, European adaptation.

Three steps, in this order. You decide how far we go together.

01

Readiness review

A joint review of your architecture and of the regulations that apply in Europe and Germany.

02

Qualification

Your path to qualification by European OEMs.

03

European adaptation

Together, we adapt your projects and products for Europe.

One point of contact: a specialised core team in Germany, backed by a vetted partner network for large programmes.

02Automated and autonomous driving

Experience in automated driving and Level 4.

A specialised German team with OEM-side experience. Talk to us about a project or simply a question.

Autonomous driving · since 2024

ISO/SAE 21434 assessments of an autonomous-driving software platform for a global technology company.

Automated driving · since 2022

Security engineering for automated driving functions of a European OEM, from risk analysis to test specification.

OEM and tier 1

Cybersecurity interface agreements with global tier-1 suppliers, including the supplier of an automated-driving compute platform, and onboarding of their teams into the OEM’s security process.

Qualification

Qualification programme for one of Germany’s largest automotive engineering service providers, plus workshops for a European OEM’s security engineers.

Automotive team

Management with more than 25 years in automotive software projects for German OEMs.

Client names are confidential. References can be discussed in person.

03Focus on Germany

German readiness.

KBA and federal states · Technical supervision · German OEMs · Data protection

Partner readiness, with a focus on Germany

Together, we get ready for what German and European OEMs, fleet customers and assessors ask, and help initiate the right conversations.

04Regulatory affairs

Where the rules stand.

As of November 2026.

Since 11 Sep 2026 · from 11 Dec 2027

EU Cyber Resilience Act

Reporting obligations since 11 September 2026, full obligations from 11 December 2027.

From 12 Sep 2026

EU Data Act

Access by design for new connected products.

Since 1 Aug 2025

RED delegated act · EN 18031

Cybersecurity requirements for internet-connected radio equipment.

From 20 Jan 2027

EU Machinery Regulation

Including protection against corruption of machinery and its software.

Since 2021

Germany: Level 4

Legal framework for Level 4 with technical supervision and protected radio links.

05Getting started

How we could start

A significant first step with a clear result, then scale.

  1. 01

    Readiness workshop

    Two days with your homologation and engineering leads, on site or online: priorities and a roadmap for Europe.

  2. 02

    Special requirements

    Together, we map your specific requirements: European variants, target markets and partners.

  3. 03

    Pilot test

    Independent penetration test of one vehicle, system or charging product, with a report for engineering and a summary for stakeholders.

  4. 04

    Partnership programme

    Multi-year collaboration for your European and German roll-out, with one point of contact.

06Case studies

From real projects.

Anonymised, but concrete.

Automotive · Autonomous drivingISO/SAE 21434 assessments

Cybersecurity assessments for an autonomous driving platform

A global technology company develops a vehicle operating system and software stack for autonomous driving, with many teams and its own development process under ISO/SAE 21434.

Result

Commissioned continuously since 2024: independent assessments that give the teams early feedback, milestone by milestone.

Read the case study

Automotive · European OEMSupplier integration

Cybersecurity interface agreements with global tier-1 suppliers

A European OEM sources systems from global tier-1 suppliers, including an automated-driving compute platform. Responsibilities for cybersecurity are agreed per component, before development starts rather than at release.

Result

Agreed responsibilities on both sides and supplier teams that work within the OEM’s security process.

Read the case study

Automotive · European OEMSecurity engineering

Security engineering for automated driving functions

New driving functions, a defined OEM process under ISO/SAE 21434 and many suppliers working in parallel.

Result

Consistent, auditable security work products and far fewer questions at release.

Read the case study

07Beyond the vehicle

Beyond the vehicle

The same method works for other connected products entering the European market.

Robotics and machinery

EU Machinery Regulation, CRA, IEC 62443

Connected devices and drones

RED and EN 18031, CRA

Charging and energy products

CRA, RED and the interfaces to the vehicle

References: CRA programme for a European rail technology company. Pentest lab, BLE/NFC tests and white-box test of a vehicle API.

08At a glance

automITe in brief.

  • Founded 2009 in Lübeck, cybersecurity only since 2019
  • TISAX® label (assessment level 3) and ISO 9001:2015
  • Regulatory affairs: UN R155/R156, ISO/SAE 21434, ISO 24089, CRA, Data Act
  • Engineers qualified as Automotive Cybersecurity Engineer (ISO/SAE 21434, TÜV NORD)
  • Publication “Autonomous Driving and Cybersecurity by Design” (IntechOpen, 2023)

Contact

Let’s talk.

15 minutes, no obligation: where you are heading in Europe and what a good first step could be. In English or German.

or call us: +49 151 42019537

Moritz Krebbel

Managing Director · Product Security

Automotive and autonomous driving · EU Cyber Resilience Act · Security by design

Andreas Fechner

Managing Director · Enterprise Security

Penetration testing · Security assessments · Digital resilience