Supply Chain Software
Origin Inspection
Mitigate Risks with Easy Software Origin Tracking for Proactive Vehicle Compliance
Request a DemoStay Ahead of the Curve.
Solve the Problem Before It Starts.
US Connected Vehicle Regulations (15-CFR Part 791 Subpart D) prohibits connected vehicles from using software or hardware tied to "countries of concern" — like China and Russia. This regulation prohibits the use of specific Vehicle Connectivity Systems (VCSs) and Automated Driving Systems (ADSs) linked to those countries.
But relying solely on supplier declarations or outdated, point-in-time surveys leads to delayed detection. By that time, it is the OEMs—not the suppliers—who bear the liability. Can you afford that kind of risks?
Continuous Monitoring for Proactive Vehicle Compliance
With xZETA, identifying software origin is no longer a manual process — it's automatic. Empowered by our parent company Trend Micro with more than 35 years of threat and malware signature scan, xZETA is purpose-built for automotive SBOM and compliance workflows. Here's what you get: (1) Precise flagging of high-risk components, (2) Easy software origin tracking, (3) Fewer last-minute compliance fire drills.
Your 3 Compliance Wins with xZETA
Instant Supply Chain Insights
Quickly detect software origin changes before they turn into major risks.
Automatic Compliance Update
Stay compliant with evolving U.S. regulations — no manual tracking needed.
End-to-End Lifecycle Assurance
Keep your product compliant and within standards from development to deployment.
Understand US Connected Vehicle Regulations (15-CFR Part 791 Subpart D) — fast.
Trusted by Automotive Leaders
YC Chang
The xZETA system delivers almost immediate results … accelerating our product development efficiency. … In a recent case, we went from vulnerability scan to patch deployment in just two weeks, a major improvement from the previous six-month time frame.
Jason Hsu
VicOne xZETA swiftly addresses unknown cybersecurity vulnerabilities, enhancing our proactive management and product security.
John Heldreth
We are grateful for VicOne's support and industry-leading expertise in creating the specialized AutoVulnDB CVE database.
Tin T. Nguyen
We utilize the xZETA system to demonstrate our effective vulnerability management capabilities to auditors, which helps us meet the requirements of UN R155.
Know More From Our Resources
GAIN INSIGHTS INTO AUTOMOTIVE CYBERSECURITY
VicOne Situational Awareness Report: 400 Cyber Incidents, with In-Vehicle Systems Most Affected in Q3 2026
VicOne's Q3 2026 Situational Awareness Report tracks where automotive cyber risk shifted: in-vehicle systems overtook enterprise IT as the most affected domain, Asia recorded a 36.8% rise in observed incidents, and ransomware activity spanned the full automotive value chain across 97 incidents.
READ MORE →
Sony Patches Seven XAV-9500ES Flaws That Could Have Enabled Device Compromise
Sony patched seven XAV-9500ES vulnerabilities affecting Wi-Fi, Bluetooth, and USB. VicOne examines the attack paths, potential impact, and next steps.
READ MORE →
Why Cybersecurity Is Essential to Safety Assurance for Physical AI
Physical AI can become unsafe even without experiencing conventional failures. Safety assurance must account for cyber manipulation of the inputs, models, commands, and systems that shape robot behavior.
READ MORE →
AI Agents Can Shape the Physical World. We Can Secure Their Actions.
VicOne supports NVIDIA's Open Agent Safety Platform, extending the focus from secure AI agent decisions to the real-world actions of vehicles and robots.
READ MORE →