PCA Cyber Security

PCA Cyber Security is a cybersecurity services firm specializing in product and embedded device security, with a particular focus fintech and the automotive industry and other sectors including financial services and energy. The company operates out of Europe, with a German subsidiary based in Munich. Core services include: - Penetration Testing: Simulated attacks on embedded devices, vehicles (full vehicle pentests), EV chargers, and payment terminals to identify vulnerabilities and support compliance - Threat Intelligence: Product-focused threat intelligence services, including a proprietary platform called TICAP, tailored for automotive and related industries - Security Assessment: Risk identification and security issue discovery for products and devices prior to deployment - Cybersecurity Monitoring: Continuous device monitoring services aimed at maintaining compliance and ongoing protection The company has conducted notable research resulting in publicly disclosed vulnerabilities, including the "PerfektBlue" Bluetooth attack affecting infotainment systems in Mercedes, Volkswagen, and Skoda vehicles, as well as remote access vulnerabilities in the Nissan Leaf. Case studies also cover EV charger testing and payment terminal assessments for clients such as Adyen and Castles Technology. PCA Cyber Security holds TISAX accreditation and is a registered Associate Participating Organization (APO) at the PCI Security Standards Council. The company has participated in the Pwn2Own Automotive contest (Tokyo, 2024 and 2025) and has presented research at conferences including Black Hat, Hexacon, and Escar.