" " indicates required fields
Jerusalem, Israel, and Munich, Germany – May 16, 2024 – C2A Security, the only risk-driven DevSecOps product security company, today announced the opening of its German-based subsidiary, C2A Security GmbH. The new entity will help the company to better support its European-based customers, build up its German-based team, and position the company for stronger growth during the second half of 2024.
C2A Security helps mobility players including car makers and tier 1 suppliers to automate their product security throughout the vehicle lifecycle, comply with industry regulations such as UN Regulation No. 155, ISO/SAE 21434, Chinese GB Standards, and others, and manage software development and operations efficiently and cost-effectively, at scale. Just recently, the company announced a global, multi-year enterprise agreement with Daimler Truck AG, in one of the most significant product security deals that were done in the industry.
“The opening of our new subsidiary, C2A Security GmbH, aligns with our growth strategy, which goes hand-in-hand with our plans to open an office in Munich later this year”, said Roy Fridman, C2A Security CEO. “As the only risk-driven DevSecOps product security platform, our solution has gained widespread traction as the automotive industry rushes to meet cybersecurity regulations and industry standards, and, importantly, better handle software-defined product development. By providing a comprehensive platform for product security management and automation, we empower our customers with the essential tools and risk-based context to deliver software securely and efficiently, at scale, while ensuring compliance with industry regulations and standards. Seeing our growth in Europe and especially in Germany, we decide to open an office and grow our on-the-ground presence.”
For example, UN Regulation No. 155 already has a wide-ranging impact on the automotive industry, as car makers are mandated to have a Cyber Security Management System (CSMS) across their entire fleet by June 2024 – the 2nd and final phase of the regulation. Some car makers have opted to stop the sales of popular models in Europe because they couldn’t comply with the regulations.
The company’s EVSec platform is the only risk-driven, DevSecOps product security platform that allows developers to focus on creative features and manage software and operations at scale, in an automated manner. Over the past year, C2A Security added multiple OEMs and Tier 1s to its portfolio of customers, successful evaluations, and partnerships such as BMW Group, Daimler Truck AG, Marelli, NTT Data and Siemens, among others.
Dynamic threat modeling and risk assessment aligned with global regulations
LLM-agnostic generative AI layer powering automation across every module
Aggregated threat feed contextualized against your actual products
Generate, manage, and triage all BOMs and vulnerabilities across the lifecycle
Quantitative optimization of mitigation strategy and security control allocation
Configurable dashboards and reports across every EVSec data layer
Extract software composition and risk from firmware and binaries without source code
Optimized anomaly detection for Ethernet and CAN, plus ECU runtime protection
Quantify and manage cybersecurity risk for products operating in the field
Enrich SOC events with deep product and architecture context
Context-driven test and validation with intelligent fuzzing, integrated into CI/CD
AI-powered static analysis integrated into CI/CD with reduced false positives
Foundational layer: cyber model, workspaces, and integration backbone to DevOps toolchain
Out-of-the-box and customizable workflows for regulatory and security processes
Centralized compliance management with evidence generated from live data