Vector Informatik vs VxLabs
Vector Informatik
Vector Informatik is a Stuttgart-based automotive software and tooling company founded in 1988, whose portfolio includes embedded cybersecurity components for electronic control units. Its MICROSAR HSM firmware provides secure boot, secure key storage and cryptographic services on ECU hardware security modules, and was certified to ISO/SAE 21434 by test house exida in June 2025. The MICROSAR Classic basic software includes a crypto stack with drivers for SHE and HSM trust anchors and the AUTOSAR Key Manager for in-vehicle key and certificate handling. On the verification side, vTESTstudio provides fuzz test design executed in CANoe, and Vector Consulting Services delivers TARA, ISO/SAE 21434 and UNECE R155 work.
Pros
- MICROSAR HSM firmware holds a product-level ISO/SAE 21434 certificate issued by exida in June 2025, rather than only an organisational process certificate
- Security functions ship inside an AUTOSAR basic software stack already used in series ECU development, so they fit an existing production toolchain
- Covers both the build side (embedded crypto stack, key management, HSM firmware) and the verification side (fuzz testing in vTESTstudio and CANoe)
- Vector Group reported roughly 4,000 employees and EUR 1.16bn revenue for 2023, indicating a stable long-term supplier
Things to check
- A standalone TARA product could not be confirmed on public pages; TARA appears to be delivered through Vector Consulting Services, so confirm what tooling is in scope
- Cybersecurity is one strand of a very broad tool and software portfolio, so the boundaries of a security engagement need defining up front
- No public pricing: licensing, consulting and training are all quote-based
Pricing:
VxLabs
VxLabs is an automotive cybersecurity and embedded software company founded in January 2022, registered in Regensburg, Germany (HRB 19099) with a US entity in Delaware. Its platform, ThreatZ, is an AWS-hosted SaaS launched in October 2025 that links system modelling, TARA, SBOM, vulnerability management, incident handling and compliance evidence in a single knowledge graph for ISO/SAE 21434 and UNECE R155. The company also sells engineering services covering AUTOSAR Classic and Adaptive ECU development, penetration testing, CSMS consulting and R155 type approval support. Uraeus was the earlier platform brand and uraeus.io now redirects to vxlabs.ai.
Pros
- Registered operating company with a German commercial register entry (HRB 19099, Regensburg) and a separate US entity
- The ThreatZ launch in October 2025 was covered by independent automotive trade press including Telematics Wire
- Scope is automotive specific throughout, built around ISO/SAE 21434 and UNECE R155 rather than repackaged general IT security
- Publishes concrete engagement models (time and materials, fixed price, managed-service retainer) and a defined delivery process
Things to check
- The Uraeus brand was retired and uraeus.io redirects to vxlabs.ai, so older references and links point at the previous name
- Customer logos shown on the site are vendor claims, with no published case detail or contactable references
- Compliance posture is stated as ISO/SAE 21434 aligned and SOC 2 Type II aligned rather than certified, so request certificates directly
- Founded 2022 and small relative to others in this category, so delivery capacity and references are worth checking
Pricing: