YMESG GmbH

YMESG GmbH, founded in 2025, builds and operates the QORE high-performance E-Bike system on behalf of Yamaha Motor eBike Systems GmbH. The product stack is a connected-vehicle stack in miniature: Drive³ motors (Peak and Power variants), InTube batteries at 800 or 650 Wh, control units, a Smart Charger with three charging modes, and the QORE eBike App for iOS and Android. The app handles route planning, bike customization, and - crucially - over-the-air firmware updates. That OTA pipeline is the highest-stakes attack surface in the system: a compromised update path means compromised motors, batteries, or both, and the consequences scale from data exposure to physical safety.

The threat model is embedded and mobile. On the firmware side, battery management systems and motor controllers run safety-critical code - think thermal runaway scenarios and uncontrolled acceleration. On the mobile side, the app stores route data, syncs with the hardware over Bluetooth or similar protocols, and pushes OTA packages. The technical domains span electric vehicle systems, battery technology, control systems, and mobile application development, which means the team is working across the full stack from power electronics to consumer software.

Operating out of Europe with a focus on the cycling and personal transportation vertical, YMESG is a relatively young entity with an experienced team and an emphasis on performance and control. For anyone working in embedded security, IoT protocol hardening, mobile application security, or secure update infrastructure, the combination of safety-critical hardware, a connected app surface, and a brand with Yamaha's visibility attached to it makes this a concrete and high-context environment - not a theoretical exercise.