VicOne is a Trend Micro subsidiary that secures vehicles and other Physical AI systems, such as AI robots, across their life from development to the road or the factory floor. Its customers are automotive OEMs, Tier 1 suppliers, EV charging manufacturers and operators, and robot makers who need to find software vulnerabilities, detect attacks in operation and meet automotive cyber regulations.
In a car or a robot, a software flaw is not only a data risk: it can change how a physical machine behaves, which makes cybersecurity part of safety.
At A Glance
| Vendor | VicOne |
|---|---|
| Category | OT/IoT Security, automotive and Physical AI cybersecurity |
| Deployment | Cloud platforms (xZETA, xNexus), in-vehicle software (xCarbon), penetration testing service (xScope) |
| Agentic AI | xPhinx protects in-vehicle edge AI and AI agents |
| Certifications | Automotive SPICE (ASPICE CL2), ISO/SAE 21434, TISAX Assessment Level 3 |
| Customers | UD Trucks, California Robotics, Primax |
| Market classification | OT/IoT Security |
What VicOne Does
VicOne aims to make cybersecurity an essential part of Physical AI safety assurance. It splits the work into two phases. Before a vehicle or robot ships, the job is to find vulnerabilities, test how components hold up and gather the evidence regulators ask for. Once systems are in service, the job becomes detecting and stopping attacks on the machine itself and across whole fleets, with threat intelligence feeding both phases. The regulations the products are built around include UN R155, ISO/SAE 21434 and the EU CRA.
Products
XZETA
xZETA is a cloud service for engineering and product security teams who need to know which known vulnerabilities sit in their vehicle software. It analyses code and system behaviour with several layers of scanning and keeps the software bill of materials for each component under management.
XScope
xScope is VicOne’s penetration testing service for automotive systems. It covers zero-day exploitability testing, in-depth security assessments and rapid scans, giving OEMs and suppliers evidence of how a component holds up before release.
XAurient
xAurient is a threat intelligence platform for automotive security teams. It turns raw cybersecurity data into early warnings and findings that a team can act on, and it supports the other products in the portfolio.
XNexus
Vehicle security operations centres use xNexus, a cloud-based extended detection and response (XDR) platform, to watch whole fleets rather than single cars.
- Collects telemetry from vehicle endpoints, cloud services and backend infrastructure
- Correlates signals across those layers to surface threats worth acting on
XCarbon
xCarbon is an intrusion detection and prevention system that runs as software on electronic control units.
- Monitors ECU behaviour, in-vehicle network traffic and CAN bus messages for anomalies
- Applies virtual patches, detection rules and automated defences at the edge
CRA Studio
Manufacturers selling connected products into the EU use CRA Studio to stay compliant with the Cyber Resilience Act across the product lifecycle. It combines SBOM management, continuous vulnerability monitoring and support for the 24-hour reporting duty to ENISA.
Radeis And Rthena
Robot makers face a newer problem: a cyber weakness can change what a physical machine does. Radeis validates robots before deployment by connecting vulnerabilities and AI model risks to their possible effect on robot behaviour. Rthena then protects robots in operation, detecting risk that could alter behaviour and coordinating approved responses across single robots or whole fleets.
Smart Cockpit And EV Charging Protection
Two further solutions address specific parts of the connected vehicle. Smart cockpit protection prevents data leaks from cockpits that run AI features, and EV charging protection monitors charging systems for vulnerabilities and builds resilience against attacks for EVSE manufacturers and charge point operators.
XPhinx
xPhinx protects edge AI and AI agents running inside the vehicle from prompt injection, jailbreaks, unsafe behaviour and data leakage, and is designed to do so without adding delay to the interaction.
How It Works
| Component | What it does |
|---|---|
| Cloud platforms | xZETA and xNexus are delivered from the cloud. |
| In-vehicle software | xCarbon runs on vehicle ECUs and enforces its rules locally at the edge. |
| Telemetry flow | Vehicles, cloud services and backend systems send telemetry to xNexus in the cloud, where it is correlated in one place for the security operations team. |
| Services | xScope is delivered by VicOne’s testers as a service. |
| Robot fleets | Rthena runs on deployed robots, and a response approved once can be applied across the fleet. |
Company Background
| Founded | May 2022, launched by Trend Micro as its connected car cybersecurity venture. |
|---|---|
| Headquarters | Shibuya City, Tokyo, Japan. |
| Ownership | Subsidiary of Trend Micro. |
| Leadership | Max Cheng (CEO). |
| Research | Runs the Automotive CyberThreat Research Lab, which studies vehicle cyber incidents. |
| Recognition | Frost & Sullivan 2023 Competitive Strategy award. |
Note: This overview is compiled from VicOne’s publicly available information as of 4 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.