Supply Chain Software
Origin Inspection
Mitigate Risks with Easy Software Origin Tracking for Proactive Vehicle Compliance
Request a DemoStay Ahead of the Curve.
Solve the Problem Before It Starts.
US Connected Vehicle Regulations (15-CFR Part 791 Subpart D) prohibits connected vehicles from using software or hardware tied to "countries of concern" — like China and Russia. This regulation prohibits the use of specific Vehicle Connectivity Systems (VCSs) and Automated Driving Systems (ADSs) linked to those countries.
But relying solely on supplier declarations or outdated, point-in-time surveys leads to delayed detection. By that time, it is the OEMs—not the suppliers—who bear the liability. Can you afford that kind of risks?
Continuous Monitoring for Proactive Vehicle Compliance
With xZETA, identifying software origin is no longer a manual process — it's automatic. Empowered by our parent company Trend Micro with more than 35 years of threat and malware signature scan, xZETA is purpose-built for automotive SBOM and compliance workflows. Here's what you get: (1) Precise flagging of high-risk components, (2) Easy software origin tracking, (3) Fewer last-minute compliance fire drills.
Your 3 Compliance Wins with xZETA
Instant Supply Chain Insights
Quickly detect software origin changes before they turn into major risks.
Automatic Compliance Update
Stay compliant with evolving U.S. regulations — no manual tracking needed.
End-to-End Lifecycle Assurance
Keep your product compliant and within standards from development to deployment.
Understand US Connected Vehicle Regulations (15-CFR Part 791 Subpart D) — fast.
Trusted by Automotive Leaders
YC Chang
The xZETA system delivers almost immediate results … accelerating our product development efficiency. … In a recent case, we went from vulnerability scan to patch deployment in just two weeks, a major improvement from the previous six-month time frame.
Jason Hsu
VicOne xZETA swiftly addresses unknown cybersecurity vulnerabilities, enhancing our proactive management and product security.
John Heldreth
We are grateful for VicOne's support and industry-leading expertise in creating the specialized AutoVulnDB CVE database.
Tin T. Nguyen
We utilize the xZETA system to demonstrate our effective vulnerability management capabilities to auditors, which helps us meet the requirements of UN R155.
Know More From Our Resources
GAIN INSIGHTS INTO AUTOMOTIVE CYBERSECURITY
When GPS Tracking Lies: How Spoofing Can Conceal Cargo Theft
In this joint blog, VicOne and Mobile Defender Inc. explain how GPS spoofing enables cargo theft and how fleets can detect, correlate, and respond to location manipulation.
READ MORE →
AI-Defined Vehicles: Practical Gains and Implications for Automotive Cybersecurity
First of two parts. What the industry is building as vehicles move from software-defined to AI-defined, and why cybersecurity must account for how AI decisions become actions.
READ MORE →
Can a Robot Do Everything Right and Still Be Unsafe?
What a conversation between Boston Dynamics and VicOne reveals about how manipulated information can turn expected robot operation into an unsafe outcome
READ MORE →
VicOne Situational Awareness Report: 400 Cyber Incidents, with In-Vehicle Systems Most Affected in Q3 2026
VicOne's Q3 2026 Situational Awareness Report tracks where automotive cyber risk shifted: in-vehicle systems overtook enterprise IT as the most affected domain, Asia recorded a 36.8% rise in observed incidents, and ransomware activity spanned the full automotive value chain across 97 incidents.
READ MORE →