ETAS releases Automotive Cyber Maturity Report 2025

• A survey of 174 automotive industry experts from all global automotive markets
• Companies with a high level of cyber maturity adopt a holistic approach to cybersecurity throughout product lifecycles, ecosystems, and supply chains
• Security automation and generative AI (GenAI) have moved from hype to product

Bochum, Germany, August 15, 2025 – The automotive industry is undergoing profound technological changes. Centralized E/E architectures, decoupled hardware and software, and an increasing usage of artificial intelligence (AI) are fundamentally altering vehicles. In this dynamic environment, cybersecurity is becoming a core strategic competence. Organizational and technological levels of cyber maturity are now closely interconnected and are key to ensuring competitiveness and effective protection of vehicles throughout their entire life cycle.

“Security is one key dimension to ensuring and maintaining vehicle health over the lifetime”, explains Mariella Minutolo, Executive Vice President Sales at ETAS.

The ETAS Cyber Maturity Survey has become an important barometer of automotive cybersecurity for decision makers. Now in its fifth year, the survey provides comprehensive insights into the automotive industry's approach to cybersecurity and its self-assessment by polling experts at all levels, from security technicians to executives. Cybersecurity experts from ETAS conducted and evaluated the survey.

A total of 174 experts worldwide participated in the survey this year. There was an even more balanced distribution across the entire industry than last year. 42 percent of participants working for suppliers, 28 percent for OEMs, and 14 percent in the semiconductor industry.

Takeaways from the report include:

• Organizational and technical cyber maturity are intertwined. Companies with a high level of maturity take a holistic view of cybersecurity across product lifecycles, ecosystems, and supply chains.
• Security automation through GenAI is gaining importance. GenAI can improve threat and vulnerability detection as well as secure software development.
• Cyber incidents have become common, and companies differ drastically in how prepared they are to react and to mitigate the risks.
• Regional security regulations are becoming increasingly complex and regionally fragmented, making a mature approach to security compliance more necessary than ever.

“We are proud that our survey delivers insights and guidance for executives and subject matter experts alike“, emphasizes Dr. Moritz Minzlaff, Head of Professional Security Services at ETAS.

ETAS would like to thank all who participated in this year's survey. Their perspectives are crucial in steering the industry towards a more secure and innovative future.

ETAS GmbH is a wholly owned subsidiary of Robert Bosch GmbH, represented in twelve countries in Europe, North and South America, and Asia. ETAS' portfolio includes software development tools, software testing solutions, automotive middleware, data acquisition & processing tools, authoring & diagnostic solutions, automotive cybersecurity solutions, and end-to-end engineering and consulting services for the realization of software-defined vehicles. Our product solutions and services enable vehicle manufacturers and suppliers to develop, operate, and secure differentiating vehicle software with increased efficiency.