A walk through a real embedded penetration test, step by step.
7 October 2026. Cymobility Pvt. Ltd. has been accredited by International Quality and Accreditation Services (IQAS) in accordance with ISO/IEC 17025:2017 for its software and IT system testing laboratory. The certificate covers automotive penetration testing against UN Regulation No. 155 Annex 5 threat categories, communication protocol fuzz testing and component vulnerability scanning, referenced to ISO/SAE 21434:2021.
IQAS is a signatory to the ILAC Mutual Recognition Arrangement and the APAC MRA. Test reports issued under this accreditation are therefore recognised by accreditation bodies in the signatory economies, which include the major automotive markets in Europe, North America, Japan, Korea and China. OEMs can include these reports directly in their UN R155 and AIS-189 compliance submissions. Suppliers can provide the same reports to their OEM customers as trusted evidence, reducing the need for the OEM to audit the supplier's testing process.
Who this is for
- OEMs preparing type approval submissions under UN R155 or AIS-189 who need Annex 5 test evidence that will withstand scrutiny
- Tier 1 and Tier 2 suppliers whose customers require component-level penetration testing, fuzz testing and vulnerability evidence
- Manufacturers exporting to markets where authorities expect results from a laboratory accredited under the ILAC MRA
- Teams with internal test capability who want an independent accredited result for vehicle-level validation
Organisations with a vehicle type, ECU or connected component approaching type approval, or with a customer requirement for accredited test evidence, are invited to contact Cymobility with a description of the product and its interfaces. Cymobility will respond with a scoped test plan. Details of the scope of accreditation and the report format are available on request.
About Cymobility: We help automotive and connected-device companies build secure, compliant products, from design and testing to certification and continuous cybersecurity monitoring.