VxLabs vs Upstream Security
VxLabs
VxLabs is an automotive cybersecurity and embedded software company founded in January 2022, registered in Regensburg, Germany (HRB 19099) with a US entity in Delaware. Its platform, ThreatZ, is an AWS-hosted SaaS launched in October 2025 that links system modelling, TARA, SBOM, vulnerability management, incident handling and compliance evidence in a single knowledge graph for ISO/SAE 21434 and UNECE R155. The company also sells engineering services covering AUTOSAR Classic and Adaptive ECU development, penetration testing, CSMS consulting and R155 type approval support. Uraeus was the earlier platform brand and uraeus.io now redirects to vxlabs.ai.
Pros
- Registered operating company with a German commercial register entry (HRB 19099, Regensburg) and a separate US entity
- The ThreatZ launch in October 2025 was covered by independent automotive trade press including Telematics Wire
- Scope is automotive specific throughout, built around ISO/SAE 21434 and UNECE R155 rather than repackaged general IT security
- Publishes concrete engagement models (time and materials, fixed price, managed-service retainer) and a defined delivery process
Things to check
- The Uraeus brand was retired and uraeus.io redirects to vxlabs.ai, so older references and links point at the previous name
- Customer logos shown on the site are vendor claims, with no published case detail or contactable references
- Compliance posture is stated as ISO/SAE 21434 aligned and SOC 2 Type II aligned rather than certified, so request certificates directly
- Founded 2022 and small relative to others in this category, so delivery capacity and references are worth checking
Pricing:
Upstream Security
Upstream Security operates a cloud-native, agentless AI platform purpose-built for connected vehicles and mobility IoT. It ingests telematics, OTA, diagnostic, and dealership data to deliver cybersecurity detection and response (V-XDR), automotive threat intelligence, and data-driven applications. Upstream pairs its platform with a managed 24/7 Vehicle Security Operations Center and monitors tens of millions of vehicles, making it one of the largest-scale players in connected-vehicle security. Because it works server-side without in-vehicle agents, it is typically deployed alongside embedded ECU protection rather than replacing it.
Pros
- Operates at massive scale, monitoring tens of millions of vehicles and devices
- Agentless, cloud-native architecture needs no in-vehicle software footprint
- Combines a security platform with a fully managed vSOC and dedicated threat intelligence
- Well-funded and established, with a US-based vSOC supporting North American OEMs
Things to check
- Server-side focus complements rather than replaces in-vehicle ECU protection
- Enterprise sales model with no public pricing
- Effectiveness depends on the breadth and quality of vehicle data feeds ingested
Pricing: Custom (contact sales)