About

Security research at the vehicle’s core

Shviro Lab is an automotive cybersecurity research lab. We work on the systems beneath the surface — ECU hardware and firmware, diagnostics, in-vehicle networks and vehicle gateways.

Tom Shviro, founder of Shviro Lab

Founder

Tom Shviro

  • Founder
  • Cybersecurity Researcher
  • Automotive Security Specialist

Tom Shviro is a cybersecurity researcher focused on finding and understanding vulnerabilities in complex embedded and automotive systems.

His work spans the entire security stack — from hardware and boot processes to firmware, diagnostic protocols and vehicle communication networks.

With extensive hands-on experience in reverse engineering and vulnerability research, Tom investigates how real systems work, identifies weaknesses in their security boundaries and analyzes how those weaknesses can impact the larger system.

His research has contributed to the discovery and responsible disclosure of security vulnerabilities, including CVEs in automotive and embedded technologies. He has also collaborated with international and government-related organizations on cybersecurity research and complex security assessments.

At Shviro Lab, Tom brings this research-driven approach to automotive cybersecurity — combining low-level technical expertise, vulnerability research and practical security testing to help organizations build more resilient vehicle systems.

Areas of expertise

  • Automotive Cybersecurity
  • ECU & Firmware Security
  • Reverse Engineering
  • CAN / CAN-FD
  • UDS / Diagnostics
  • Secure Boot
  • Embedded Security
  • Vulnerability Research & CVE Disclosure

Approach

How we work

  • ECU Security
  • Firmware Research
  • CAN / CAN-FD
  • UDS / Diagnostics
  • Secure Boot
  • Automotive Ethernet

Modern vehicles are increasingly software-defined, connected and exposed to complex attack surfaces. Shviro Lab focuses on the systems beneath the surface — from ECU hardware and firmware to diagnostics, network protocols and vehicle gateways.

Our approach combines low-level reverse engineering, embedded security research and automotive protocol analysis to identify weaknesses before they become real-world risks.

The Lab

Inside the Shviro Lab

Hardware-level automotive security research requires hands-on access to the systems being assessed. Shviro Lab combines embedded platforms, automotive interfaces, debugging tools and laboratory equipment to analyze systems at the hardware, firmware and protocol levels.

ECU boardsProduction and bench units
Development boardsEmbedded target platforms
CAN interfacesCAN / CAN-FD bus access
DebuggersJTAG / SWD probes
OscilloscopeSignal and timing analysis
Logic analyzerBus and protocol capture
Automotive Ethernet100BASE-T1 / 1000BASE-T1 media
Test harnessesBench wiring and power control

Why Shviro Lab

Why Shviro Lab

Hands-On

We work directly with hardware, firmware and vehicle interfaces.

Low-Level Expertise

Security analysis down to embedded systems and protocol behavior.

Research Driven

We investigate how systems actually work — not just how they are documented.

Automotive Focus

Our work is centered on vehicle systems and their evolving attack surfaces.

Security Engineering

From Research to Security Engineering

Research findings matter when engineering teams can act on them. We work alongside development programmes to turn analysis into design and remediation decisions.

Threat Analysis & Risk Assessment

Automotive cybersecurity risk identification and security analysis.

Architecture Security

Security analysis across ECUs, gateways and vehicle communication architectures.

Security Testing

Hands-on assessment of hardware, firmware, diagnostics and networks.

Security Recommendations

Actionable remediation guidance for engineering teams.

Frameworks
  • ISO/SAE 21434
  • UNECE R155
  • UNECE R156
Our work references the automotive cybersecurity frameworks that engineering programmes are assessed against. Shviro Lab does not issue certification or homologation approval.

Have an ECU You Want to Break?

Let Shviro Lab assess its security before someone else does.