Text in the film
- Prompt in. App out. (A prompt reads: build me a dealer portal. fast.) Live by Friday.
- 45 % of AI-generated code introduced an OWASP Top 10 vulnerability. (Veracode, GenAI Code Security Report 2025; CWE-89 SQL injection, CWE-798 hard-coded secrets, CWE-862 missing authorization)
- Attackers have AI, too. Probing. Exploiting. 24/7. (1 in 6 breaches involved attackers using AI, IBM 2025)
- Perfect grammar. Your boss's voice. Not your boss. (An inbox shows a mail from "Managing Director": "Urgent transfer, today, confidential". 60 % of breaches involve the human element, Verizon DBIR)
- June 2024. One ransomware attack on one dealer software vendor. ~15,000 dealer locations across North America disrupted. (CDK Global ransomware incident, June 2024)
- Speed needs security. Secure by design. (Reviewed code, access by role, data stays in your business.)
- PK Automotive Solutions. Built fast. Built secure. pk-automotive-solutions.com
IT security for car dealerships
Pentest and phishing test for your dealership.
We find the gaps before someone else does.
Software is built faster than ever, often with AI. Attackers use the same tools. We find out where your business is vulnerable: in your systems and with your people.
Free initial call, 30 minutes.
How the security check works
- 01
Pentest
We test the systems you can reach from the outside: portals, interfaces and remote access. And we look for the gaps before someone else does.
- 02
Social engineering
Realistic phishing emails and, if you like, a phone call too. You see how your team reacts in everyday work. In our experience, that is where the biggest risk lies.
- 03
Report and training
Afterwards you get a report on exactly what to do, plus a short training for your team. It builds on what actually happened at your business.
We only test what we have agreed with you in writing beforehand.
Why this matters now
The figures from the film, with sources.
Built fast. Built secure.
We build software for dealerships, dealer groups and importers. That is why we know where the typical weak spots are: portals, interfaces to the DMS, and access for staff and partners.
We also build the kind of software we test: Services for dealerships, Vehicle configurators
Frequently asked questions about pentests and phishing tests
What is a pentest for a car dealership?
A penetration test is a commissioned, controlled attack on your own systems. We test what is reachable from the outside: customer portals, interfaces to the DMS and to manufacturer portals, remote access for staff and partners. The goal is to find the gaps before a real attacker does.
Is a pentest legal?
Yes, if the owner of the systems commissions it in writing. Without consent, this kind of access is a criminal offence in Germany (Section 202a StGB). That is why we only test what we have agreed with you in writing beforehand: which systems, in which period, and who your contact person is.
How does a phishing test with staff work?
Your team receives realistic phishing emails and, if you like, a phone call. You see how your people react in everyday work. The training is built from what happens. The point is how the team behaves, not to single anyone out.
Does the works council have to agree to a phishing test?
If there is a works council in Germany, it usually has a right of co-determination as soon as employee behaviour is evaluated (Section 87 (1) no. 6 BetrVG). Data protection also plays a part. We therefore agree the procedure and evaluation with you beforehand.
What do we get after the security check?
A report on exactly what to do, plus a short training for your team. The training builds on what actually happened at your business, not on generic examples.
Why does IT security matter for car dealerships in particular?
Dealerships depend on many systems and access points: DMS, manufacturer portals, finance, website forms. The ransomware attack on the DMS vendor CDK Global in June 2024 showed how big the damage can be: around 15,000 dealer locations in North America could only work in a limited way for days.
Get in touch.
A 30-minute intro call, free and without obligation. We will tell you honestly whether we are the right partner.
We usually reply within one business day. Fixed-price quote after the call.