Supply Chain Software
Origin Inspection
Mitigate Risks with Easy Software Origin Tracking for Proactive Vehicle Compliance
Request a DemoStay Ahead of the Curve.
Solve the Problem Before It Starts.
US Connected Vehicle Regulations (15-CFR Part 791 Subpart D) prohibits connected vehicles from using software or hardware tied to "countries of concern" — like China and Russia. This regulation prohibits the use of specific Vehicle Connectivity Systems (VCSs) and Automated Driving Systems (ADSs) linked to those countries.
But relying solely on supplier declarations or outdated, point-in-time surveys leads to delayed detection. By that time, it is the OEMs—not the suppliers—who bear the liability. Can you afford that kind of risks?
Continuous Monitoring for Proactive Vehicle Compliance
With xZETA, identifying software origin is no longer a manual process — it's automatic. Empowered by our parent company Trend Micro with more than 35 years of threat and malware signature scan, xZETA is purpose-built for automotive SBOM and compliance workflows. Here's what you get: (1) Precise flagging of high-risk components, (2) Easy software origin tracking, (3) Fewer last-minute compliance fire drills.
Your 3 Compliance Wins with xZETA
Instant Supply Chain Insights
Quickly detect software origin changes before they turn into major risks.
Automatic Compliance Update
Stay compliant with evolving U.S. regulations — no manual tracking needed.
End-to-End Lifecycle Assurance
Keep your product compliant and within standards from development to deployment.
Understand US Connected Vehicle Regulations (15-CFR Part 791 Subpart D) — fast.
Trusted by Automotive Leaders
YC Chang
The xZETA system delivers almost immediate results … accelerating our product development efficiency. … In a recent case, we went from vulnerability scan to patch deployment in just two weeks, a major improvement from the previous six-month time frame.
Jason Hsu
VicOne xZETA swiftly addresses unknown cybersecurity vulnerabilities, enhancing our proactive management and product security.
John Heldreth
We are grateful for VicOne's support and industry-leading expertise in creating the specialized AutoVulnDB CVE database.
Tin T. Nguyen
We utilize the xZETA system to demonstrate our effective vulnerability management capabilities to auditors, which helps us meet the requirements of UN R155.
Know More From Our Resources
GAIN INSIGHTS INTO AUTOMOTIVE CYBERSECURITY
Looking Beyond the Mythos Era: If AI Can Read Firmware, What Does Protection Mean Now?
Part 2 of 2: AI-driven binary analysis is forcing a rethink of automotive firmware protection. Part 1 covered how AI shortens PoC-to-exploit timelines.
READ MORE →
20 Phoenix Contact CHARX Vulnerabilities Patched: How They Could Have Enabled Deeper EV Charger Control
Phoenix Contact patched 20 CHARX SEC-3xxx EV charger vulnerabilities in firmware 1.9.1. VicOne examines their wider implications and practical steps for operators.
READ MORE →
CVE-2026-86793: SGLang Bypass Could Let Attackers Run Code on AI Servers
VicOne details CVE-2026-86793, a SafeUnpickler bypass in SGLang that could enable unauthenticated remote code execution, and recommended mitigations.
READ MORE →
How Physical AI Challenges Traditional Security Assumptions for Autonomous Systems
Physical AI changes OT security assumptions, making behavioral verification essential when an air gap is not practical and response time is limited.
READ MORE →