Zoox

Zoox operates a purpose-built, fully autonomous, all-electric robotaxi - a bidirectional vehicle with four-wheel steering and no steering wheel, designed from scratch to carry up to four passengers with zero human input. The company is live in Las Vegas, San Francisco, and Foster City, running real fleets in real urban environments where the threat surface is dense and the margin for error is effectively zero. For cybersecurity practitioners, the attack model here is specific and layered: a vehicle with no traditional controls means safety-critical systems, custom firmware, sensor suites, and cloud-side fleet management all need hardening as an integrated whole - not as separate IT domains. Software-defined vehicles with continuous OTA update pipelines introduce supply chain risk, while the sensor and perception stack (LiDAR, cameras, radar) presents adversarial ML attack surfaces that most enterprise security teams never encounter. The technical domains span autonomous vehicle software, vehicle design, and custom safety systems. Securing this stack means working across embedded systems, V2X communication protocols, and the AI-driven decision layers that translate sensor data into driving behavior. The operational footprint in three cities adds the complexity of live infrastructure - fleet orchestration, remote operations interfaces, and passenger-facing systems - all of which expand the perimeter.