Cybellum Product Security Platform

Cybellum Technologies Ltd. is an Israeli product security company that helps manufacturers of vehicles, medical devices and industrial equipment keep connected products secure and compliant throughout their lifecycle. It opened a Japanese office in 2021 and works with carmakers, Tier-1 suppliers, electronics makers and medical technology companies.

The Cybellum Product Security Platform builds and validates SBOMs from product software, then triages vulnerabilities and coding weaknesses against a database of about 1.1 million issues drawn from sources such as OSV, Red Hat, Debian and ExploitDB. It links findings to threat models and penetration and fuzz test results, tracks remediation, and provides a central product risk dashboard. A compliance module automates evidence for ISO/SAE 21434, FDA premarket submissions, the EU CRA and more than 50 other standards, while a PSIRT module monitors threat sources after launch.

• SBOM and asset management: Builds and validates SBOMs with approval workflows.
• Vulnerability management: Triages vulnerabilities and weaknesses against about 1.1 million known issues.
• Test integration: Links findings to threat models and penetration and fuzz test results.
• Product risk dashboard: Central view of product security governance and KPIs.
• Compliance automation: Generates evidence for ISO/SAE 21434, FDA, EU CRA and 50+ standards.
• PSIRT module: Monitors threat sources and supports post-launch investigations.

A Vietnamese automotive electronics supplier can manage SBOMs and ISO/SAE 21434 evidence for ECUs delivered to Japanese or Korean carmakers. A medical device exporter can prepare FDA premarket cybersecurity documentation. An electronics contract manufacturer can track vulnerabilities across many customer product lines in one platform.

Product security teams work from one validated SBOM and vulnerability record instead of spreadsheets per product line. Version 3.7 detects 33% more vulnerabilities by correlating CPE and PURL identifiers across Windows, Linux, open-source and embedded software. Automated compliance evidence for ISO/SAE 21434, FDA and the CRA shortens audits, and milestone KPIs show progress to management.

Vehicle type approval under UN R155, FDA premarket cybersecurity rules and the EU CRA all require manufacturers to maintain SBOMs and documented vulnerability handling. Automotive, electronics and medical device suppliers in Vietnam and Southeast Asia that serve Japanese, Korean and European brands increasingly need to provide this evidence to their customers.

Legal entity Cybellum Technologies Ltd., described in its press coverage as an Israeli company; opened a Japanese office in 2021. Holds TISAX and ISO 27001 certificates. Received the Frost & Sullivan Competitive Strategy Award in 2024. Customer logos include BMW, JLR, Audi, Nissan, Mobileye, Siemens, Dräger, Danaher, Supermicro and LG, with case studies on ASUS and Hyundai.