Products and Solutions

Platform

Callisto S3 Platform

An AI-native automotive cybersecurity platform, covering risk insight, protection governance, and security operation loops with Sight, Shield, and Safe.

Platform Applications

S3-VSOC Security Operations Center

Use powerful and efficient artificial intelligence technology to accelerate the detection and prevention of new threats in automotive networks.

V-Guard AI Guardrails

Comprehensive injection protection and content auditing for in-vehicle assistants and enterprise AI models.

V-Shield Endpoint-Cloud Virus Protection

Anti-virus, cloud hash checking, signature updates, policy management, and compliance auditing for vehicle systems and edge terminals.

V-SafetyMind Cabin Safety Manager

Full-domain security monitoring, AI guardrails, privacy permission protection, Skill management, and guardian logs for LLM-powered smart cabins.

Agent Applications

V-Copilot Operation Agent

An intelligent companion for vehicle security center operations

V-Insight Risk Analysis

Identify potential risks and optimize abnormal alarm strategies.

V-Compliance Compliance Analysis

Understand global data compliance and output analysis results.

V-TARA Threat Modeling

Automate threat identification, risk assessment, and defense strategies.

Professional Services

VSOC Managed Operations

5x8 on-site + 7x24 automated response, L1/L2/L3 three-tier team for full-process operations closure, meeting UN R155 continuous monitoring and CSMS compliance.

AutoSec Lab Construction

Vehicle information security testing lab construction solutions for UN/GB regulations.

Cybersecurity Compliance & Overseas Certification

End-to-end consulting and certification support for UN R155/156, ISO 21434 and local data compliance.

VTI Automotive Threat Intelligence Service

Tailored automotive threat intelligence, vulnerability analysis, intelligence subscriptions, and zero-day alerts for OEMs and supply chains.

Industry Solutions

Robot Security Solutions

Attack surface analysis and anomaly detection covering the full lifecycle of embodied AI systems.

Intelligent Driving Security Solutions

We provide comprehensive solutions to address automotive cybersecurity, user privacy and ECU security in intelligent driving.

Smart Cabin Security Solutions

Privacy permission governance, AI guardrails, Skill management, and guardian logs for smart cabins.

Automotive Data Security Solutions

Focusing on the data security of intelligent connected vehicles, we create customized data security solutions for automakers.

Charging Pile Security Solutions

We are committed to protecting charging pile and charging network data and creating the most forward-looking and competitive solutions.

Vehicle-Road-Cloud Security Solutions

Network and data security solutions designed specifically for "vehicle-road-cloud integration".

GB 44495 Anti-virus Solutions

Vehicle malicious code detection and cloud closed-loop management system meeting the latest national standards.

Why Callisto?
Join us
News and Blogs

V-Shield Endpoint-Cloud Virus Protection Platform

An endpoint-cloud integrated malware protection solution designed for GB 44495 and UN R155 compliance. Covering in-vehicle SDKs, offline scanning, cloud hash checking, signature updates, policy operations, event reporting, and audit tracking to help automakers build a continuous malware defense system.

Cloud Central

Hash Checking & Updates

Endpoint SDK

Local Scan & Interception

Security Operations

SOC / SIEM / Compliance

What is Callisto V-Shield Endpoint-Cloud Virus Protection Platform?

V-Shield is an endpoint-cloud integrated malware scanning solution for smart vehicles and automaker cloud platforms.

Problem solved: Intercepts malicious apps, trojans, and botnets to meet mandatory compliance.
Core capabilities: Local/cloud scanning, APK and USB scan, signature updates, and event reporting.
Target audience: Automakers, Tier 1 suppliers, and fleet operators.
Relation to S3 Platform: Belongs to the Shield layer, focusing on low-level file and application malware detection.

Regulatory & Compliance Requirements

GB 44495 and UN R155 require automakers to establish mechanisms for the identification, detection, protection, response, recording, and continuous improvement regarding malware (including viruses). V-Shield fully supports OEMs in meeting these mandatory compliance requirements through integrated detection, signature updates, and audit reporting.

Endpoint-Cloud Integrated Architecture

A collaborative system designed for automotive businesses, supporting virus operations and closed-loop governance for large-scale fleets.

Endpoint Defense (Vehicle)

Minimalist in-vehicle integration for Android and Linux. Includes file scanning, APK installation checks, USB scanning, scheduled scans, and offline queues.

Cloud Central (Backend)

Enterprise-controlled hub for signature and policy distribution. Includes API gateway, asset registry, policy center, update center, and cloud checking proxy.

Security Operations (SOC & SIEM)

From detection alerts to visual governance. Includes event, reporting, and audit centers, with seamless integration into TSP and data lakes.

In-Vehicle SDK Capabilities

Lightweight, low-power, tailored for complex vehicle environments

Local File Scanning

APK Installation Check

USB/Peripheral Scan

Scheduled/Idle Scan

Local Signature Management

Local Policy Cache

Cloud Check API

Offline Event Queue

CPU/IO Resource Control

Block/Isolate/Clean Actions

Cloud Platform Capabilities

Security operations hub supporting millions of concurrent vehicles

API Security Gateway

Endpoint Asset Inventory

License Activation

Scan & Action Policies

Signature Canary/Full Updates

Cloud Hash Check Proxy

Event Aggregation

Multi-dimensional Reports

Compliance Audit Center

System Integration Adapters

Virus Detection Data Flow

1. Trigger Scan (USB/Install/Timer)

2. Local Signature Check (ms response)

3. Generate File Hash

4. Cloud Hash Check (if online)

5. Cloud Returns Risk Verdict

6. Endpoint Blocks/Isolates

7. Report to Event Center

8. SOC Correlation & Fleet Alert

Typical Scenarios

Pre-installation APK Check

Real-time interception of malicious code when owners download from app stores or install third-party APKs via ADB.

USB Media Scanning

Automatically triggers a full scan when a USB drive is inserted, preventing USB viruses from infecting the infotainment system.

Nighttime Low-Impact Scanning

Executes deep full-disk scans during vehicle sleep, charging, or idle times to avoid consuming compute resources while driving.

Large File Cloud Hash Checking

For large unknown files, only the Hash is extracted and sent to the cloud for comparison, saving massive bandwidth and memory.

Signature Canary Rollouts & Rollbacks

Supports incremental signature pushes. OEMs can verify in test fleets before full deployment, with one-click rollback if false positives occur.

GB 44495 Compliance Reporting

Automatically generates regulatory-compliant reports on malware detection rates, signature versions, and action logs for certification audits.

Relation to Other Callisto Products

Product	Main Value	Relation to V-Shield
S3-VSOC	Cloud security operations and closed-loop response	Receives malware detection alerts from V-Shield to correlate with other network logs.
V-SafetyMind	Cabin full-domain security and privacy protection	V-Shield focuses on low-level malware; V-SafetyMind focuses on permissions and LLM behaviors.
V-Guard	LLM input/output and tool call guardrails	V-Guard defends against semantic inputs, while V-Shield defends against malicious files. They complement each other.

Frequently Asked Questions

What is an Endpoint-Cloud Virus Protection Platform?

It is a malware defense system tailored for smart vehicles. Through the synergy of a lightweight in-vehicle SDK and the automaker’s cloud management platform, it creates a closed loop of detection, updates, event reporting, and compliance.

How is V-Shield different from PC/Mobile antivirus?

V-Shield is highly optimized for the automotive compute environment, strictly controlling CPU, I/O, and network usage so driving safety processes are never impacted. Moreover, its signature and policy distribution are fully controlled by the automaker, supporting deep integration with OTA, TSP, and SOC.

How does V-Shield support GB 44495 and UN R155 compliance?

Regulations mandate vehicles to have malware protection capabilities. V-Shield provides everything from local scanning and cloud checking to event reporting and audit logs, serving directly as technical proof for OEMs to pass mandatory certifications.

How do local and cloud scanning work together?

For small files or known threats, local lightweight signatures provide millisecond offline detection. For large files, unknown APKs, or rapidly updating threats, the system extracts the Hash and queries the cloud, balancing offline availability with cloud compute power.

How are virus signatures updated and rolled back?

The cloud platform manages signature versions. It supports full/incremental pushes and canary releases by vehicle model or region. If a new signature causes false positives, operators can roll back to the previous stable version with one click.

Is it supported in weak-network or offline scenarios?

Yes. Without a network, the SDK relies entirely on cached policies and offline signatures to detect and block threats. Security events are stored in a local queue and automatically uploaded when the network recovers.

How are CPU, I/O, and network usage controlled?

The SDK provides strict resource control policies, allowing caps on CPU usage, I/O throttling, and pause/resume mechanisms (e.g., automatically pausing scans when the vehicle shifts into Drive or CPU load exceeds 80%).

Who owns the scanning data and audit logs?

All data is reported directly to the automaker’s privately deployed V-Shield cloud platform, or pushed to the OEM’s existing SOC/Data Lake via adapters. Callisto does not access sensitive vehicle data.