Commercial Vehicles
Trucks and buses, held to automotive rigor.
Commercial platforms carry long service lives and demanding uptime. The same connected-graph monitoring applies: threat intel, vulnerabilities and supplier risk, resolved to the exact ECU and program.
Long lifecyclesSoftware watched across a service life measured in decades, not model years.
R155 / R156 in scopeN and M categories, trucks and buses included, need both approvals like any passenger car.
Body builders includedAuxiliary controllers and PTO interfaces added after the chassis are part of the inventory.
Ranked for uptimeFindings scored for operational impact, because a grounded truck is the cost that matters.
The estate you defend
A truck is a platform other companies keep building on.
The chassis OEM ships the base vehicle; body builders, PTO integrators and telematics providers extend it for years. Software responsibility spreads across all of them while the vehicle stays in revenue service.
- The long tail. Service lives beyond a decade mean components outlive their upstream support; EOL tracking is not optional.
- The builder ecosystem. Auxiliary ECUs and interfaces arrive after type approval and still touch the vehicle network.
- Uptime economics. Prioritization has to weigh operational impact, not just CVSS.
What applies
Same approvals as a passenger car. Longer to live with them.
Heavy platforms sit squarely in scope, and their lifespan stretches every obligation.
R155 + R156
M and N categories include buses and trucks; all new vehicles since July 2024 need both approvals in participating markets.
ISO/SAE 21434
Clause 8 continual monitoring is where a 15-year service life is actually won.
NIS2 / CRA
Operators can be essential entities; retrofit and body-builder electronics carry product obligations of their own.