Cybersecurity in critical systems: Embention’s commitment to safe flight

A Cybersecurity Framework for trustworthy AAM operations

Cybersecurity is a cornerstone of trust in the Advanced Air Mobility (AAM) sector. At Embention, we understand the critical need to protect data, communications, and operational continuity in increasingly connected ecosystems. Our cybersecurity framework addresses these needs with certified protocols, robust software practices, advanced communication layers, and a resilient infrastructure that guarantees end-to-end protection for UAV and eVTOL systems.

This comprehensive approach incorporates certified information security measures, such as ISO 27001, to underpin our Information Security Management System (ISMS) across all operations. Our systems are developed in accordance with the DO-178C, DO-254 and DO-160G standards to ensure reliability and safety.

In addition, Embention is the first company specializing in drone autopilots to achieve APDOA approval from EASA, enabling it to design certified, aviation-grade systems under the strict ETSO standards. At the same time, the company became the first worldwide manufacturer of autopilots for drones and eVTOLs to receive POA certification from AESA. This dual recognition positions Embention as a global benchmark in the development of safety-critical avionics, combining design and manufacturing under the highest civil aviation standards.

Standards-Driven security and mission continuity

Embention is certified under ISO 27001, validating the robustness of our ISMS across critical operations. This includes structured risk management, access control, and incident response protocols that safeguard the confidentiality and integrity of all data processed.

We also comply with ISO 9001 and EN9100 quality management systems, enhancing system interoperability and traceability. Additionally, our Habilitación de Seguridad de Empresa (HSEM) accreditation by the Spanish National Intelligence Center (CNI), supported by an HPS-cleared professional, enables us to securely manage classified and sensitive information.

Our Veronte Cloud infrastructure incorporates secure Identity and Access Management (IAM) with JWT authentication and token rotation. Internally, microservices use OAuth 2.0 token-based credentialing to maintain secure, seamless integration throughout the platform.

Real-time protection against disruptions

To ensure availability and resilience, Embention deploys advanced mechanisms that detect and mitigate denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks. Health-based detection systems monitor service responsiveness, enabling fast identification of anomalies, while real-time alerts facilitate immediate mitigation. These automated defenses safeguard uninterrupted access to Veronte Cloud services.
Communication security and roadmap initiatives

Veronte Autopilots includes a flight lock feature that prevents critical parameter changes during missions, preserving configuration integrity. Our Veronte Communication Protocol (VCP) secures communication through encrypted, isolated channels and authenticated device IDs. Looking forward, we are implementing STANAG 4586 to enhance NATO interoperability and fortify end-to-end security.

Embention’s roadmap includes adopting AES encryption aligned with STANAG 4586 and integrating WebSocket protocols to improve real-time responsiveness and telemetry security in UAV and eVTOL operations.