HydraVision

Security Test Environment

HydraVision is a Security Test Environment for automated cybersecurity validation throughout the entire product lifecycle. It connects security artifacts from TARA, SBOM, SOC/VSOC and vulnerability analyses with reusable test workflows and deterministic execution on real systems. Agentic AI accelerates test automation while HydraVision ensures repeatable, traceable and auditable results. From embedded systems and industrial devices to connected vehicles, HydraVision helps manufacturers and suppliers automate security testing, reduce validation effort and generate evidence for standards and regulations such as UNECE R155, ISO/SAE 21434 and the Cyber Resilience Act. 

Product Overview
Data Sheet
HydraVision_security_test_environment

Features

  • Automated Security Testing: Create, customize and repeatedly execute security test cases using predefined templates (200+) and reusable test logic. Automate cybersecurity validation and regression testing throughout the product lifecycle while ensuring consistent and reproducible execution. 
  • MCP Server (NEW): Connect external AI agents with HydraVision through the Model Context Protocol (MCP). The MCP Server enables agents to link security artifacts such as TARA, SBOM and SOC/VSOC data directly to the corresponding test cases and compare job execution results against these artifacts, ultimately accelerating the validation process. 
  • Flexible Target Configuration: Apply test cases across development stages (HIL, SIL), software versions, product variants and different systems under test without rebuilding test logic. Configure protocols (CAN FD, DoIP, SOME/IP), security access, TLS settings and other target parameters through straightforward configuration files. 
  • Security Reporting & Evidence: Generate customizable reports and audit-ready evidence from structured test results. Versioned files and direct editing in the Web IDE provide flexibility while supporting traceable cybersecurity validation and regulatory compliance. 
  • CI/CD Integration: Integrate automated security and regression testing into CI/CD pipelines to automatically validate every software release and identify vulnerabilities earlier in development – when they are easier and cheaper to fix.
  • ECU & System Testing: Extend security validation beyond individual components. Test ECUs and complete systems via CAN and (Automotive) Ethernet to evaluate cybersecurity across interconnected systems and realistic environments. 
  • Remote Testing & Collaboration: Securely access and manage security testing remotely through HydraVision’s centralized platform. Enable development, cybersecurity and validation teams to collaborate and share test assets and results across projects and locations. 
  • User & Group Management: Define roles, responsibilities and access rights with flexible user and group management. Structure access to projects and critical data while supporting governance, compliance and information security requirements. 
  • Flexible Deployment: Choose between cloud-based SaaS and on-premise deployment to fit your infrastructure needs. Maintain consistent testing workflows and validation processes regardless of the deployment model.  

Benefits

Compliant

Stay ahead of evolving cybersecurity regulations and ensure your embedded systems meet relevant security standards. HydraVision enables continuous security validation and reproducible, versioned evidence for UNECE R155, ISO/SAE 21434, the Cyber Resilience Act and other industry-specific frameworks. 

Transparent

Gain full visibility into your security validation process with traceable workflows, reproducible test execution and structured results. HydraVision helps teams connect security artifacts with validated evidence and make informed security decisions throughout the product lifecycle. 

Cost-Effective

Reduce cybersecurity validation effort with automated workflows and reusable test assets. HydraVision minimizes repetitive manual work and enables teams to build a reusable security test library over time, reducing long-term validation costs across software versions, products and systems. 

Applications

  • Embedded Systems
  • Automotive Systems
  • Industrial Systems
  • Aviation & Aerospace Systems
  • Maritime Systems
  • Defense Systems
  • IoT (Internet of Things) Devices
  • Medical Devices

Validation & Security Testing

HydraVision is a powerful test case management tool, offering continuous security validation. It comprises four integral layers to fortify digital defenses: 

Commencing with interface-level tests, HydraVision scans low-level drivers for potential threats. This vulnerability scanning is followed by the comprehensive testing of protocols, assessing their robustness and identifying potential weaknesses. Additionally, HydraVision introduces fuzzing techniques to enhance the precision of cybersecurity risk assessments.

The third layer encompasses the evaluation of complex security controls and functions, ensuring a comprehensive examination of the system’s defensive capabilities. Finally, HydraVision addresses the tip of the cybersecurity iceberg by providing dedicated security tests for known Common Vulnerabilities and Exposures (CVEs) provided by third parties such as ASRG and Auto-ISAC.

This multifaceted approach positions our Security Test Environment as a feature-rich library, offering automated penetration testing and risk assessment across diverse levels, effectively safeguarding against a spectrum of potential risks.

4. Common Vulnerabilities & Exposures

Vulnerabilities provided by Auto-ISAC, ASRG, etc.

3. Security Controls & Functions

Security Access, Secure Debug, SecOC, MACsec

2. Protocols

UDS, GMLAN, DoIP, TCP, IPv4, IPv6, DHCP, DNS, HSFZ, SOME/IP, XCP, SAE J1979, SAE J1939, UDP, TLS, GAP, GATT, ATT, SMP, L2CAP, SDP

1. Interfaces

OBD-2, CAN + CAN FD, (Automotive) Ethernet, GPIO, JTAG, UART, Bluetooth, WiFi, HD16-9-1939, BLE

Test Cases (Excerpt)

IsotpScan

Testcase basic scan for ISOTP endpoints of the ECU on the CANSocket, returns a List of all found ISOTP endpoints of the ECU

ObdScan

Testcase scan of the OBD protocol, iterates over all services that contain information, sequence of ids: 01, 02, 06, 08, 09, 03, 07, 0A.

UdsDtcScan

Testcase scan of the UDS protocol for all available DTC information, uses UdsSystemStates to scan in every
available UDS session.

UdsRdbiScan

Testcase scan of the UDS ReadDataByIdentifier service, uses UdsSystemStates to scan in every available UDS session.

SomeIpSniff

Testcase basic scan for SomeIpEndpoint of the ECU on the eth, will create a list of
SomeIpEndpoints with values it got.

DoipPortTest

Testcase test if a port of PortScanResults supports Doip, will create a list od found DoIPEndpoints.

TlsScanTestSsl

Testcase scan for TLS security of the ECU on the eth with testssl.sh tool, will create .json files and List of TLSScanResults

EthDoipTest

Testcase test if an IP next to the source of a Vehicle Announcement Messages will get a connection to the target.

EthArpEndpointPortScan

This test case conducts a comprehensive port scan on the provided ArpEndpoint, examining the whole rangeof ports and generating PortScanResults based on the findings. The difference to the IpEndpoint portscan is, that the test can’t use an IP configuration that did get an imcp answer from the target.

EthArpSniff

Testcase basic sniffer for ARP request of the ECU on the eth, will create a List of ArpEndpoints with all the messages it got. The Testcase will remove duplicates automatically.

EthDoipSniff

Testcase basic scan for Vehicle Announcement Messages over DoIP of the ECU on the eth, will create a list of
DoIPAnnouncement with values it got.

EthIPEndpointPortScan

This test case conducts a comprehensive port scan on the provided IPEndpoint, examining a specified range of ports and generating PortScanResults based on the findings.

CanWakeupTest

Test if the ECU can be kept awake by CAN messages, logs results and writes summary.Returns CanBusKeepAliveBehaviour if successful.

PowerBehaviourTest

Testcase to analyze PowerBehaviour of ECU while running. Returns new objects of PowerBehaviour, a PowerMonitoring configured to the PowerBehaviour of the ECU.

UdsStateScan

Testcase scan of the UDS protocol for all available states in DiagnosticSessionControl and SecurityAccess. Returns a UdsSystemStates object containing routes to all available states of the ECU.

UdsSecurityAccess

This test case iterates through all sub-test cases defined in the test plan and executes them sequentially.The test plan includes tests such as Penalty Time Check, Immediate Key Try, Seed Analysis, and more, each aimed at verifying specific aspects of the UDS SecurityAccess service.

UdsWdbiScan

Testcase scan of the UDS WriteDataByIdentifier service, uses UdsSystemStates to scan in every available UDS session.

UdsRoutineControlScan

Testcase scan of the UDS RoutineControl service, uses UdsSystemStates to scan in every available UDS session.

UdsServiceScan

Testcase scan of the UDS protocol for all available services, uses UdsSystemStates to scan in every available UDS session

UdsRmbaScan

Testcase scan of the UDS ReadMemoryByAddress service, uses UdsSystemStates to scan in every available UDS session.

UdsEcuResetScan

Testcase scan of the UDS ECUReset service, uses UdsSystemStates to scan in every available UDS session.

V-Cycle

HydraVision is a Security Test Environment that connects cybersecurity engineering with continuous security validation. It brings inputs from TARA and risk assessments, SBOM analysis, and SOC/VSOC operations into repeatable testing workflows, enabling teams to reuse existing security knowledge throughout the product lifecycle. This creates tangible benefits across different roles and stages of the cybersecurity lifecycle:

Project Manager:
  • Ensure compliance with industry standards. 
  • Reduce time and costs with automated testing.
  • Simplify user management and reporting.
Developer:
  • Gain rapid security insights via log files.
  • Receive real-time feedback to accelerate development cycles.
  • Ensure assessment conformity.

HydraVision Influence

External CS Input

Indirect Benefit

Tester:
  • Manage all Devices Under Test (DUTs) 
  • Debug security flaws in real time.
  • Leverage the test case editor and scalable test cases for more efficiency.
Lifecycle Support:
  • Automatically track new cybersecurity threats
  • Maintain continuous security monitoring in a cost-efficient way
  • Ensure conformity (e.g. UNECE, CRA).

FAQ

What is HydraVision, and who is it for?

HydraVision is a cybersecurity automation platform designed for testing and validating embedded systems across multiple domains — from automotive to industrial, medical, and IoT devices. It supports manufacturers, suppliers, penetration testers, and developers by providing a flexible security test environment that facilitates security and functionality testing on individual components, subsystems, or complete platforms.

How does HydraVision automate security testing?

HydraVision automates penetration testing by leveraging a unique software middle layer that enables the creation and reuse of security tests across different ECUs. This approach ensures scalability, reproducibility, and traceability, significantly reducing manual effort while improving testing efficiency.

What types of tests does HydraVision support?

HydraVision covers a broad spectrum of tests, including:

OEM-specific cybersecurity tests: Brand-specific protocols like BMW (e.g., BmwRdbiScan)

Security and network tests: CVE analysis, UDS SecurityAccess validation

CAN and Automotive Ethernet tests: Fuzzing, wake-up behavior, XCP scans, DoIP sniffing

ISO-TP and UDS diagnostic tests: Endpoint scanning, ECU resets, Read/Write Data by Identifier

OBD testing: Standardized On-Board Diagnostics coverage

Power and behavior analyses: Power-on behavior, wake-up, and sleep handling

How many test cases are included by default?