Central Coast cybersecurity startups see surge in demand as regulation debate heats up

Cybersecurity founders in the Central Coast say they are fielding a surge of inbound interest from autonomous-vehicle companies and mobility startups worried about looming state and federal data-security mandates. The demand spike comes as Uber and Waymo escalate a high-stakes lobbying battle in Sacramento and Washington over who should write-and enforce-safety standards for self-driving fleets.

Jason Tran, co-founder of CipherLayer Security, a Santa Monica-based startup that moved its headquarters to a co-working space on Ocean Avenue in Santa Monica last year, told The Daily Central Coast his firm has signed three new contracts with robotaxi developers in the past 90 days. All three, he said, specifically asked for encryption protocols that go beyond current California Vehicle Code requirements. “They’re preparing for a regulatory environment that doesn’t exist yet,” he said.

Local startups bet on compliance-as-a-service

The Central Coast’s tech scene-stretching from Santa Barbara to Ventura-has long been overshadowed by Silicon Valley and San Francisco. But cybersecurity is one niche where local startups are punching above their weight. At least a half-dozen Central Coast-based cybersecurity companies have raised seed or Series A rounds since January, according to PitchBook data viewed by this reporter. None of the founders would disclose exact figures, but several confirmed they are hiring engineers and compliance specialists.

One of those companies is SentinelPort, founded by former Navy cryptologist Elena Rivas in a converted surf shop on State Street in Santa Barbara. Rivas said her team built a “compliance-as-a-service” dashboard that lets autonomous-vehicle operators map their security posture against proposed California Public Utilities Commission (CPUC) rules. “We sold the first 10 seats before we had a finished product,” Rivas said, declining to name clients.

The timing is no accident. On July 12, TechCrunch reported that Uber's robotaxi lobbying effort has put it on a collision course with Waymo, with both companies pushing competing visions for federal preemption of state-level safety rules. A day earlier, TechCrunch Mobility described the standoff as a “robotaxi ultimatum,” noting that the CPUC could decide as early as August whether to expand Waymo's permit to operate fare-charging robotaxis on Central Coast highways.

What happens next-and what founders say to do now

For Central Coast startups, the regulatory uncertainty is a business opportunity. But it also creates headaches for smaller firms that can't afford a full-time compliance team. Several founders said they are banding together to form a Central Coast Autonomous Vehicle Security Consortium-a working name, not yet formalized-to share threat-intelligence data and lobby for clear, consistent rules.

“We don't care which company wins the lobbying war,” said Tran. “We care that companies are forced to secure their data, and that the rules are the same for everyone.”

For now, founders advise any Central Coast startup building software for connected vehicles or autonomous systems to start auditing their data pipelines now. The CPUC’s next public hearing on robotaxi expansion is scheduled for August 17 in San Luis Obispo. No matter what the commission decides, one thing is certain: the cybersecurity startups of the Central Coast are ready to sell them the locks.