Cybellum

Established in 2016 by co-founders Slava Bronfman and Eyal Mossity, Cybellum has carved a niche in the critical field of product security for connected devices. Bronfman, serving as CEO, and Mossity, as CTO, leveraged their extensive backgrounds from the Israeli Intelligence Corps to address the mounting cybersecurity challenges within the Internet of Things (IoT) and automotive sectors. Their firsthand experience in offensive and defensive cyber operations provided a unique perspective on the vulnerabilities inherent in complex device software, forming the bedrock of Cybellum's mission.

The company operates a B2B model, providing a Product Security Platform tailored for device manufacturers across various industries, including automotive, medical devices, and industrial IoT. Its client roster features prominent names such as Jaguar Land Rover, Supermicro, and Rolls Royce. Cybellum's revenue is generated through the licensing of its platform and the provision of associated cybersecurity services, addressing the entire product lifecycle from development to post-production.

At the core of Cybellum's offering is its proprietary Cyber Digital Twins™ technology. This technology creates a detailed, live digital replica of a device's software components, including open-source, commercial, and proprietary code. By deconstructing firmware and software binaries, the platform provides a comprehensive Software Bill of Materials (SBOM), offering a granular view of every component within the device. This detailed analysis enables product security teams to move beyond mere vulnerability scanning. The platform facilitates continuous vulnerability management, allowing teams to identify, prioritize, and mitigate security risks throughout the device's lifespan. Furthermore, it automates compliance validation against standards like UNECE WP.29 R155 for the automotive industry and FDA requirements for medical devices, streamlining what is often a manual and arduous process. In the event of a security incident, the platform equips teams with the necessary tools for effective incident response.

A key milestone in the company's journey was its acquisition by LG Electronics in 2021, a move that signaled strong confidence in Cybellum's technology and its strategic importance to the future of connected devices, particularly within the automotive sector. While operating as an independent entity to maintain its agile startup culture, the acquisition provides Cybellum with significant resources and market access, solidifying its position in the product security landscape.

Keywords: product security, cybersecurity, IoT security, automotive cybersecurity, vulnerability management, SBOM, compliance automation, embedded systems, cyber digital twin, device security